Description
CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetBotz via the web-service interface or webui.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | NetBotz 5 - 750/755 | Versions 5.5.2 and prior | — |
Advisories 2
- ICSA-26-260-05 Schneider Electric NetBotz 5 750/755 CISA ICS & IT advisories · Sep 17, 2026
- SEVD-2026-223-02 Multiple Vulnerabilities on NetBotz 5 750/755 Products Schneider Electric CPCERT · Aug 11, 2026