CVE-2026-115328 | riclolsen Json-Scada up to 0.64.x Server Realtime Auth index.js opcApi NodeId.Id/StartTime/EndTime sql injection

October 22, 2026 Yanac

A vulnerability has been found in riclolsen Json-Scada up to 0.64.x and classified as critical. Affected is the function opcApi of the file src/server_realtime_auth/index.js of the component Server Realtime Auth. This manipulation of the argument NodeId.Id/StartTime/EndTime causes sql injection.

This vulnerability is handled as CVE-2026-115328. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More