CVE-2026-21410 - Vulnerability Analysis

BeyondMachines :verified:

@beyondmachines1

Feb 25, 2026

Critical Vulnerabilities Discovered in InSAT MasterSCADA BUK-TS InSAT MasterSCADA BUK-TS is affected by two critical vulnerabilities, CVE-2026-21410 and CVE-2026-22553, which allow unauthenticated remote code execution via SQL and OS command injection. **Since the vendor has not released a patch, you must assume these systems will be attacked if they are reachable online. Make sure your MasterSCADA BUK-TS is isolated from the internet and accessible only from trusted networks. Then reach out to the vendor for patches. If they don't respond, start planning a replacement.** #cybersecurity #infosec #advisory #vulnerability https://beyondmachines.net/event_details/critical-vulnerabilities-discovered-in-insat-masterscada-buk-ts-d-8-6-3-o/gD2P6Ple2L

Offensive Sequence

@offseq

Feb 25, 2026

🚨 CRITICAL SQL Injection (CVE-2026-21410) affects all InSAT MasterSCADA BUK-TS versions. Unauthenticated RCE possible — industrial ops at risk. Restrict access & monitor until patched. Details: https://radar.offseq.com/threat/cve-2026-21410-cwe-89-in-insat-masterscada-buk-ts-10cd43d6 #OffSeq #ICS #SCADA #Vulnerability

TheHackerWire

@thehackerwire

Feb 24, 2026

🔴 CVE-2026-21410 - Critical (9.8) InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vulnerable endpoint are potentially able to cause remote code execution. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21410/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack