SQL injection in Weidmueller PROCON-WEB SCADA (CVE-2026-16462)

The `GetGridData` endpoint in PROCON-WEB SCADA does not properly sanitize user input, allowing a remote unauthenticated attacker to execute arbitrary SQL commands. Successful exploitation may result in unauthorized reading, modification, or deletion of data, and potential further compromise of the underlying system. Affected versions: - vers:generic/>=1.0.0|<=6.11.2 We recommend updating to: 6.11.3. CVSS 9.3 · our assessment: act_now Reference: https://www.certvde.com/en/advisories/VDE-2026-085/ Details: https://vuln.today/cve/CVE-2026-16462