json-scada vulnerabilities

1 known vulnerability in json-scada from Riclolsen. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  json-scada: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-115328Oct 22, 2026Riclolsen

  JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js that allows authenticated users to inject SQL via HistoryReadRequest parameters. Attackers can inject stacked statements through NodeId.Id, St