JSON-SCADA (< 0.65-Alpha) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/json-scada--0.65-alpha/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 22 Oct 2026 14:17:09 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgJSON-SCADA: SQL injection vulnerability (CVE-2026-115328)https://feed.craftedsignal.io/briefs/2026-10-json-scada-sql-injection/Thu, 22 Oct 2026 14:17:09 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-json-scada-sql-injection/JSON-SCADA before 0.65-alpha contains an SQL injection vulnerability in the opcApi() function within src/server_realtime_auth/index.js.<p>JSON-SCADA before 0.65-alpha contains an SQL injection vulnerability in the opcApi() function in src/server_realtime_auth/index.js. Authenticated users can inject SQL via HistoryReadRequest parameters (NodeId.Id, StartTime, or EndTime), allowing for stacked statements that can read, modify, or delete historian data regardless of role.</p> highadvisory