{"affected":[{"defaultStatus":"unaffected","product":"DIAEnergie","source":"CNA: Deltaww","vendor":"Deltaww","versions":[{"lessThan":"1.11.01.032","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-125612","cwes":["CWE-89"],"description":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww DIAEnergie allows SQL Injection.\n\nThis issue affects DIAEnergie: before 1.11.01.032.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"CNA: Deltaww","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":8.8,"severity":"high","source":"NVD: 759f5e80-c8e1-4224-bead-956d7b33c98b","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794280602547,"publishedAt":1794279593843,"references":[{"source":"CNA: Deltaww","tags":[],"url":"https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00017_DIAEnergie%20SQL%20Injection%20Vulnerability_v1.0.pdf"},{"source":"759f5e80-c8e1-4224-bead-956d7b33c98b","tags":[],"url":"https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00017_DIAEnergie%20SQL%20Injection%20Vulnerability_v1.0.pdf"}],"remediation":[{"kind":"fix","source":"CNA: Deltaww","text":"Users are advised to contact Delta technical support to obtain and update to DIAEnergie v1.11.01.032 or a later version."}],"revision":"5f76cfd585f1e43a90ed33259ecb3202b82b1066db2831b6669ccbf20a0a9fe6","sources":[{"modifiedAt":1794279755668,"name":"CNA: Deltaww","retrievedAt":1794283701106,"url":"https://www.cve.org/CVERecord?id=CVE-2026-125612"},{"modifiedAt":1794280602547,"name":"NVD","retrievedAt":1794291386437,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125612"}],"ssvc":null,"status":"published","title":"DIAEnergie - SQL Injection Vulnerability","updatedAt":1794291386437}