MEDIUMCVSS 6.9

CVE-2026-4901

CVE-2026-4901 updated by NVD

Published: 2026-04-09
Modified: 2026-08-15
Sources: euvd, nvd

Summary

AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user. This issue was fixed in AlanWeb SCADA version 9.8.5

References

https://nvd.nist.gov/vuln/detail/CVE-2026-4901

Includes data from the ENISA EU Vulnerability Database (EUVD).

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.