CVE record · 2 sources
CVE-2026-9852
CVSS 3.1A CSV injection vulnerability exists in SYS600.
- Vendor
- Microsoft
- Product
- windows
- CVSS
- 3.1
- Exposure class
- OT / ICS
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Hitachi Energy MicroSCADA X SYS600 Product
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the…
-
A CSV injection vulnerability exists in SYS600.
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured…