Hydrosystem.poznan Control System — known CVE vulnerabilities

Every CVE whose affected-product data names Hydrosystem.poznan Control System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-34184 — CVSS 9.1 (critical): Hydrosystem Control System does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in…
• CVE-2026-34185 — CVSS 8.8 (high): Hydrosystem Control System is vulnerable to SQL Injection across most scripts and input parameters. Because no protections are in place, an…
• CVE-2026-4901 — CVSS 6.5 (medium): Hydrosystem Control System saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to…