CVE-2026-78317: DIAEnergie - SQL Injection
Published Aug 24, 2026
·Updated
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
Affected Software
1 affected component
Delta DIAEnergie=1.11.00.002
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Delta DIAEnergieto a version that resolves this vulnerability.Fixed in 1.11.00.022
Event History
Aug 24, 2026
CVE Published
via MITRE·09:34 AM
Data Sourced
via MITRE·09:34 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
The CVSS vector indicates network access and low privileges are required. No user interaction is required, and the attack complexity is rated low.
2
Which version is identified as affected?
The reported affected version is Delta DIAEnergie v1.11.00.002.