CVE-2026-115803

CVSS 4.3 (medium) · published 2026-10-24

A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts Data API. Executing a manipulation of the argument ids can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. The vendor announces: "At this moment we are working on new release with security enhancements which will be introduced to the community soon."

Weakness: CWE-285, CWE-639

Source: NVD CVE-2026-115803

References

• https://vuldb.com/cve/CVE-2026-115803
• https://vuldb.com/submit/916011
• https://vuldb.com/vuln/425987
• https://vuldb.com/vuln/425987/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.