← Back to search

CVE-2026-78308

9.8 CRITICAL

Published 2026-09-24 · Updated 2026-09-24

AI risk analysis

Summary
The flaw is an Improper Authentication vulnerability in DIAEnergie that allows Authentication Bypass, enabling unauthorized access to the system. This matters because it can lead to significant data compromise and operational disruption.
Exploitability
Exploitation is relatively straightforward with no preconditions required, as it allows bypassing authentication mechanisms entirely.
Blast radius
If exploited, this could result in unauthorized access to sensitive data and control over critical system functions, impacting the entire organization's operations and security posture.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to DIAEnergie version 1.11.00.022 or later.
auth-bypasswebcriticalvulnerabilityupgradedefensive

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.