PT-2026-21799 · Insat · Insat Masterscada Buk-Ts

Adem El Adeb · Publicado 2025-11-09 · Atualizado 2026-02-27 · CVE-2026-21410

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InSAT MasterSCADA BUK-TS (affected versions not specified)

Description InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Successful exploitation allows malicious users to potentially cause remote code execution. The issue does not require any privileges or user interaction and has a high impact on confidentiality, integrity, and availability. The vulnerable endpoint allows for this exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2025-13914

CVE-2026-21410

Produtos afetados

Insat Masterscada Buk-Ts

Referências · 11

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-01.json · Nota
• https://bukts.ru · Nota
• https://bdu.fstec.ru/vul/2025-13914 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-21410 · Nota de Segurança
• https://t.me/CVEtracker/45657 · Publicação no Telegram
• https://t.me/cveNotify/153405 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2026471266933195167 · Publicação no Twitter
• https://twitter.com/CveTodo/status/2026408868792717485 · Publicação no Twitter
• https://cisa.gov/news-events/ics-advisories/icsa-26-055-01 · Nota
• https://twitter.com/CVEnew/status/2026676423809970569 · Publicação no Twitter
• https://twitter.com/kernyx64/status/2026545247073771540 · Publicação no Twitter