CVE-2026-78308
9.8 CRITICALPublished 2026-09-24 · Updated 2026-09-24
AI risk analysis
- Summary
- The flaw is an Improper Authentication vulnerability in DIAEnergie that allows Authentication Bypass, enabling unauthorized access to the system. This matters because it can lead to significant data compromise and operational disruption.
- Exploitability
- Exploitation is relatively straightforward with no preconditions required, as it allows bypassing authentication mechanisms entirely.
- Blast radius
- If exploited, this could result in unauthorized access to sensitive data and control over critical system functions, impacting the entire organization's operations and security posture.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to DIAEnergie version 1.11.00.022 or later.
auth-bypasswebcriticalvulnerabilityupgradedefensive
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-97196
- HIGHCVE-2026-75825
- CRITICALCVE-2026-76420
- MEDIUMCVE-2026-93340PoC
- CRITICALCVE-2026-93641
- MEDIUMCVE-2026-94533PoC
- HIGHCVE-2026-100871PoC
- CRITICALCVE-2026-100886PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.