Quick answers
- Is CVE-2026-78316 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-78316 being exploited in the wild.
- How severe is CVE-2026-78316?
- High severity, with a CVSS score of 8.8, published 24 August 2026.
- Which products and versions are affected?
- Delta DIAEnergie 1.11.00.002.
- Is there a fix for CVE-2026-78316?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-78316 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-78316?
- Check whether you run Delta DIAEnergie at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This vulnerability is a SQL injection flaw in Delta DIAEnergie v1.11.00.002 that permits attackers to inject malicious SQL commands into database queries. The vulnerable component fails to properly sanitize user-supplied input before incorporating it into SQL statements. Successful exploitation enables attackers to extract sensitive data from the database, modify or delete records, or in some database configurations, execute operating system commands. The attack vector and authentication requirements are not fully specified in the available advisory text; however, the high CVSS score (8.8) suggests network accessibility. Patches or updates may be available from Delta; refer to the vendor's security advisory (Delta-PCSA-2026-00015) for remediation guidance.
Affected products
- Delta DIAEnergie 1.11.00.002
Timeline
- 2026-08-24: disclosed