AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Delta ElectronicsCVE-2026-78309

Delta Electronics DIAEnergie: SQL injection

Delta Electronics

CVE-2026-78309 · Published Sep 24, 2026

High8.8
Fix: upgrade to 1.11.00.022 or later
Delta Electronics advisory

SQL Injection vulnerability in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.

Affected versions

PackageAffectedFixed in
DIAEnergie
Product
< 1.11.00.0221.11.00.022
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-89

More Delta Electronics advisories

All Delta Electronics
Critical 9.8Sep 24Delta Electronics DIAEnergie: improper authenticationCVE-2026-78308fixed in 1.11.00.022Medium 4.3Sep 24Delta Electronics DIAEnergie: insecure direct object referenceCVE-2026-78310fixed in 1.11.00.022High 8.8Sep 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78311fixed in 1.11.00.022Critical 9.1Sep 24Delta Electronics DIAEnergie: path traversalCVE-2026-78312fixed in 1.11.00.022Medium 6.5Sep 24Delta Electronics DIAEnergie: improper access controlCVE-2026-78313fixed in 1.11.00.022High 8.8Aug 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78314no fix yet