Unrated severityNVD Advisory· Published Jan 16, 2026· Updated Jan 16, 2026
AVEVA Process Optimization SQL Injection
CVE-2025-61943
Description
The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper with queries in Captive Historian and achieve code execution under SQL Server administrative privileges, potentially resulting in complete compromise of the SQL Server.
Affected products
1- AVEVA/Process Optimizationv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.jsonmitre
- softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68eamitre
- www.aveva.com/en/support-and-success/cyber-security-updates/mitre
- www.cisa.gov/news-events/ics-advisories/icsa-26-015-01mitre
News mentions
0No linked articles in our index yet.