PT-2026-3194 · Unknown+1 · Captive Historian+1

Christopher Wu · CVE-2025-61943 · Published 2026-01-13 · Updated 2026-01-22

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Captive Historian (affected versions not specified)

Description A flaw exists that, if exploited, could allow an authenticated attacker with Process Optimization Standard User privileges to manipulate queries within Captive Historian. Successful exploitation may lead to code execution with SQL Server administrative privileges, potentially resulting in a full system compromise of the SQL Server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2026-00497

CVE-2025-61943

Affected Products

Captive Historian

Sql Server

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-61943 · Security Note
• https://aveva.com/en/support-and-success/cyber-security-updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-61943 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00497 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json · Note
• https://t.me/cveNotify/149564 · Telegram Post
• https://twitter.com/CVEnew/status/2012126467786743940 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-015-01 · Note
• https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea · Note
• https://aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-001.pdf · Note