riclolsen CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH riclolsen CVE published 2026-10-22

CVE-2026-115328

JSON-SCADA before 0.65-alpha contains a SQL injection vulnerability in opcApi() in src/server_realtime_auth/index.js, allowing authenticated users to inject SQL via HistoryReadRequest parameters. This could lead to unauthorized access and manipulation of historian data across all locations, regardless of role. Defenders responsible for JSON-SCADA systems, particularly those with historian data, should ass [truncated]