🔐 CVE Alert

CVE-2026-78309

HIGH 8.8

SQL Injection in DIAEnergie

CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CWE CWE-89
Vendor deltaww
Product diaenergie
Published Sep 24, 2026
Stay Ahead of the Next One

Get instant alerts for deltaww diaenergie

Be the first to know when new high vulnerabilities affecting deltaww diaenergie are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Deltaww / DIAEnergie
0 < 1.11.00.022

References

NVD ↗ CVE.org ↗ EPSS Data ↗
filecenter.deltaww.com: https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00014_DIAEnergie%20Multiple%20Vulberabilities%20(CVE-2026-78308%20~%2078313).pdf

Credits

Alex Williams from Pellera Technologies VulnCheck