AlanWeb SCADA saves sensitive information into a log file.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 9, 2026 · NIST NVD

   Detected

   AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user. This issue was fixed in AlanWeb SCADA version 9.8.5

2. Aug 13, 2026 · NIST NVD

   Updated

   AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user. This issue was fixed in AlanWeb SCADA version 9.8.5

Affected

• cpe hydrosystem.poznan/control systemversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-4901

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-4901

  AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthoriz

  nvd.nist.gov

References

• Vendor Advisory · cert.pl
• Reference · control-system.pl