THREAT OPS › Threat News › [NVD] CVE-2026-4901 (MEDIUM 6.5) — AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthoriz
[NVD] CVE-2026-4901 (MEDIUM 6.5) — AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthoriz
CVE-2026-4901 CVSS: 6.5 MEDIUM Published: 2026-04-09T10:16:22.543
AlanWeb SCADA saves sensitive information into a log file. Critically, user credentials are logged allowing the attacker to obtain further authorized access into the system. Combined with vulnerability CVE-2026-34184, these sensitive information could be accessed by an unauthorized user.
This issue was fixed in AlanWeb SCADA versi
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- CVE-2026-4901cve
- CVE-2026-34184cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4901