CVE-2026-16462: Weidmueller Interface Procon-Web Scada

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.

Affected products

• Weidmueller Interface Procon-Web Scada: from 1.0.0, up to and including 6.11.2

Published 2026-07-28. Last modified 2026-07-30.