medium6.5
CVE-2026-4901
AlanWeb SCADA saves sensitive information into a log file.
Impact
AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user. This issue was fixed in AlanWeb SCADA version 9.8.5
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hydrosystem.Poznan | Control System | before 9.8.5 |