PT-2026-31602 · Unknown · Hydrosystem Control System

Published 2026-04-09 · Updated 2026-04-10 · CVE-2026-4901

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Hydrosystem Control System versions prior to 9.8.5

Description The Hydrosystem Control System logs sensitive information, including user credentials, to a log file. This allows an attacker to gain unauthorized access to the system. Access to this information could be combined with other issues to gain further access.

Recommendations Update to version 9.8.5 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2026-4901

Affected Products

Hydrosystem Control System

References · 5

• https://cert.pl/posts/2026/04/CVE-2026-4901 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4901 · Security Note
• https://twitter.com/CVEarity/status/2042577168761524427 · Twitter Post
• https://twitter.com/CVEnew/status/2042186485882052947 · Twitter Post
• https://hydrosystem.poznan.pl · Note