CVE-2022-26514

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

• CWE-89
• CWE-89

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01Mitigation, Third Party Advisory, US Government Resource

Published

Mar 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26509Improper conditions check in the Intel(R) SGX SDK software m…5.5
• CVE-2022-2651Authentication Bypass by Primary Weakness in GitHub reposito…9.8
• CVE-2022-26510A firmware update vulnerability exists in the iburn firmware…6.5
• CVE-2022-26511WPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll wh…7.8
• CVE-2022-26512Uncontrolled search path element in the Intel(R) FPGA Add-on…7.3
• CVE-2022-26513Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem soft…9.6
• CVE-2022-26515Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-26516Authorized users may install a maliciously modified package …7.8
• CVE-2022-26517On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versi…7.5
• CVE-2022-26518An OS command injection vulnerability exists in the console …8.8
• CVE-2022-26519There is no limit to the number of attempts to authenticate …5.5
• CVE-2022-2652Depending on the way the format strings in the card label ar…6