{"id":"CVE-2026-115803","aliases":[],"cve":{"records":[{"id":"CVE-2026-115803","source":"VulDB","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-23T15:14:35.243Z","published":"2026-10-24T06:45:07.253Z","modified":"2026-10-26T17:41:20.319Z"}],"publishers":[{"name":"VulDB","role":"CNA","organizationId":"1af790b2-7ee1-4545-860a-a788eba489b5","modified":"2026-10-24T06:45:07.253Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-26T17:41:20.319Z"}],"references":[{"url":"https://vuldb.com/vuln/425987","tags":["vdb-entry","technical-description"],"source":"VulDB"},{"url":"https://vuldb.com/vuln/425987/cti","tags":["signature","permissions-required"],"source":"VulDB"},{"url":"https://vuldb.com/cve/CVE-2026-115803","tags":["third-party-advisory"],"source":"VulDB"},{"url":"https://vuldb.com/submit/916011","tags":["third-party-advisory"],"source":"VulDB"}],"weaknesses":[{"id":"CWE-639","description":"Authorization Bypass","source":"VulDB"},{"id":"CWE-285","description":"Improper Authorization","source":"VulDB"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-26T15:39:01.541165Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization","titleSource":"VulDB","descriptionSource":"VulDB","description":"A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts Data API. Executing a manipulation of the argument ids can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. The vendor announces: \"At this moment we are working on new release with security enhancements which will be introduced to the community soon.\"","score":5.3,"severity":"medium","published":"2026-10-24T06:45:07.253Z","modified":"2026-10-26T17:41:20.319Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"n/a","name":"Scada-LTS","platforms":[],"versions":[{"version":"2.8.0","status":"affected"}],"cpes":["cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*"],"source":"VulDB","url":"https://www.cve.org/CVERecord?id=CVE-2026-115803"}],"remediation":[],"references":["https://vuldb.com/vuln/425987","https://vuldb.com/vuln/425987/cti","https://vuldb.com/cve/CVE-2026-115803","https://vuldb.com/submit/916011"],"sources":[{"name":"CVE","id":"CVE-2026-115803","modified":"2026-10-26T17:41:20.319Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115803"}],"assessments":[{"source":"VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","score":5.3},{"source":"VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C","score":4.3},{"source":"VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C","score":4.3},{"source":"VulDB","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:C","score":4}],"sourceAffected":[],"observedAt":"2026-10-29T14:34:34.638Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T08:35:32.065Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"Scada-LTS 2.8.0 is affected by an authorization bypass vulnerability in the AmCharts Data API's AmChartValuesAPI.java file. The flaw can be exploited remotely by manipulating the 'ids' argument. The vendor is working on a new release with security enhancements.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:22:15.319Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115803"}]}}