CVE-2025-46268

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Dec 18, 2025

CISA due date

—

The record

Advantech WebAccess/SCADA is vulnerable to SQL injection, which may allow an attacker to execute arbitrary SQL commands.

Ecosystem	Package	Introduced	Fixed