$PATCH CAsoon

Advisory feed · Saturday, 24 October 20264,531 CVEs published in the last 7 daysSource: saved copy of NVD from 24 Oct (NVD isn’t answering)Advisory feedDemo · pretend coins and SOL. The CVE records are real.

TLP:CLEARDeferredPublished 24 Oct 2026 · Updated 24 Oct 2026

CVE-2026-115803

2.1LowCVSS 4.0

A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts Data API. Executing a manipulation of the argument ids can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. The vendor announces: "At this moment we are working on new release with security enhancements which will be introduced to the community soon."

Affected software: Scada-LTS
Versions: 2.8.0
Weakness: CWE-285 · Improper authorization
Assigned by: VulDB
NVD status: Deferred

ReferencesNVD https://nvd.nist.gov/vuln/detail/CVE-2026-115803 CVE.org https://www.cve.org/CVERecord?id=CVE-2026-115803 https://vuldb.com/cve/CVE-2026-115803 https://vuldb.com/submit/916011 https://vuldb.com/vuln/425987 https://vuldb.com/vuln/425987/cti

The record above is NVD’s, word for word, as read before NVD finished its analysis. Coins say nothing about the flaw.

Launch a coin on CVE-2026-115803

Coins filed under CVE-2026-115803

No coins filed yet.

Be the first to file a coin under CVE-2026-115803.

File the first coin

CVE-2026-115803 · Patch Day