What is GHSA-p6w4-7rrj-xwqx?

GHSA-p6w4-7rrj-xwqx is a security advisory published by GitHub Security Advisories with High severity. Hydrosystem Control System is vulnerable to SQL Injection across most scripts and input...

Which CVE IDs does GHSA-p6w4-7rrj-xwqx cover?

GHSA-p6w4-7rrj-xwqx covers the following CVE IDs: CVE-2026-34185. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p6w4-7rrj-xwqx?

GHSA-p6w4-7rrj-xwqx has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-p6w4-7rrj-xwqxHighCVSS 8.8

Hydrosystem Control System is vulnerable to SQL Injection across most scripts and input...

Vendor

GitHub Security Advisories

Published

April 9, 2026

Last Modified

August 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-34185 →

📋 Description

Hydrosystem Control System is vulnerable to SQL Injection across most scripts and input parameters. Because no protections are in place, an authenticated attacker can inject arbitrary SQL commands, potentially gaining full control over the database.This issue was fixed in Hydrosystem Control System version 9.8.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-34185
https://cert.pl/posts/2026/04/CVE-2026-4901
https://www.hydrosystem.poznan.pl
https://control-system.pl
https://github.com/advisories/GHSA-p6w4-7rrj-xwqx