Advantech WebAccess/SCADA vulnerabilities

CVEs per yearBy the year they were published

1. 20194
2. 20235
3. 20241
4. 20255
5. 20261

Newest CVEs

• CVE-2026-6888

  SQL Injection Vulnerability

  Advantech · SaaS Composer

  High7.2
• CVE-2025-67653

  Advantech WebAccess/SCADA Path Traversal

  Advantech · WebAccess/SCADA

  Medium5.3
• CVE-2025-46268

  Advantech WebAccess/SCADA SQL Injection

  Advantech · WebAccess/SCADA

  Medium5.3
• CVE-2025-14848

  Advantech WebAccess/SCADA Absolute Path Traversal

  Advantech · WebAccess/SCADA

  Medium5.3
• CVE-2025-14849

  Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type

  Advantech · WebAccess/SCADA

  High8.7
• CVE-2025-14850

  Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory

  Advantech · WebAccess/SCADA

  High7.2
• CVE-2024-2453

  Advantech WebAccess/SCADA SQL Injection

  Advantech · WebAccess/SCADA

  Medium6.4
• CVE-2023-1437

  CVE-2023-1437

  Advantech · WebAccess/SCADA

  Critical9.8
• CVE-2023-2866

  Advantech WebAccess Insufficient Type Distinction

  Advantech · WebAccess/SCADA

  High7.3
• CVE-2023-22450

  In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a…

  Advantech · WebAccess/SCADA

  High7.2