CVE-2019-18868: Blaauwproducts Remote Kiln Control

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak.

Affected products

• Blaauwproducts Remote Kiln Control: version 3.0.0 only; up to and including 3.0.0

Published 2020-05-07. Last modified 2026-06-17.