CVE-2026-125612: DIAEnergie - SQL Injection Vulnerability
Published Nov 10, 2026
·Updated
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww DIAEnergie allows SQL Injection.
This issue affects DIAEnergie: before 1.11.01.032.
Affected Software
1 affected component
Delta Electronics DIAEnergie<1.11.01.032
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Deltaww DIAEnergieto a version that resolves this vulnerability.Fixed in 1.11.01.032
Event History
Nov 10, 2026
CVE Published
via MITRE·02:59 AM
Data Sourced
via MITRE·02:59 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
An attacker needs network access and low-level privileges. No user interaction is required.
2
How can I determine whether my deployment is affected?
DIAEnergie versions before 1.11.01.032 are affected. Upgrade to version 1.11.01.032 or later to address the affected version range.