control system vulnerabilities and fixes

Recent CVEs affecting control system, with upgrade or downgrade steps. 3 tracked.

Also searched as: controlsystem.

control system has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-04-09. Highest priority: CVE-2026-34184 (score 42/100).

• CVE-2026-34185 HIGH 8.8 UPGRADE AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters
• CVE-2026-34184 CRITICAL 9.1 UPGRADE AlanWeb SCADA does not enforce authorization for some directories
• CVE-2026-4901 MEDIUM 6.5 UPGRADE AlanWeb SCADA saves sensitive information into a log file

FAQ

How do I fix control system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is control system being exploited right now?

None of the tracked control system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which control system CVE should I patch first?

CVE-2026-34184 currently ranks highest (42/100): AlanWeb SCADA does not enforce authorization for some directories.

RSS feed for control system · ← Back to latest CVEs