CVE-2026-6888

published 2026-05-13

CVE-2026-6888: Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface…

Priority P3 47 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to
execute arbitrary commands via a specific interface,
potentially enabling the attacker to access, modify, or delete sensitive
information within the database.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
advantech	ecowatch_saas-composer	—	—
advantech	iot_edge_linux_docker	—	—
advantech	iot_edge_windows	—	—
advantech	iotsuite_growth_linux_docker	—	—
advantech	iotsuite_starter_linux_docker	—	—
advantech	saas_composer	—	—
advantech	webaccess_saas-composer	—	—
advantech	webaccess_scada	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89