CVE-2026-41125 
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions), blueplanet 150 TL3 (All versions), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions), blueplanet 165 TL3 GEN2 (All versions), blueplanet 25.0 NX3-33.0 NX3 (All versions), blueplanet 3.0 NX3-20.0 NX3 (All versions), blueplanet 3.0-5.0 NX1 (All versions), blueplanet 360 NX3 M6 (All versions), blueplanet 50.0 NX3-60.0 NX3 (All versions), blueplanet 87.0 TL3 (All versions), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions), blueplanet gridsave 137 TL3-S (All versions), blueplanet gridsave 92.0 TL3-S (All versions), blueplanet hybrid 10.0 TL3 (All versions), blueplanet hybrid 6.0 NH3-12.0 NH3 (All versions). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.
Problem types: cwe_id: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Siemens
product: blueplanet 100 NX3 M8
default_status: unknown
vendor: Siemens
product: blueplanet 100 TL3 GEN2
default_status: unknown
vendor: Siemens
product: blueplanet 105 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 105 TL3 GEN2
default_status: unknown
vendor: Siemens
product: blueplanet 110 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 125 NX3 M10
default_status: unknown
vendor: Siemens
product: blueplanet 125 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 125 TL3 GEN2
default_status: unknown
vendor: Siemens
product: blueplanet 137 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 150 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 150 TL3 GEN2
default_status: unknown
vendor: Siemens
product: blueplanet 155 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 155 TL3 GEN2
default_status: unknown
vendor: Siemens
product: blueplanet 165 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 165 TL3 GEN2
default_status: unknown
vendor: Siemens
product: blueplanet 25.0 NX3-33.0 NX3
default_status: unknown
vendor: Siemens
product: blueplanet 3.0 NX3-20.0 NX3
default_status: unknown
vendor: Siemens
product: blueplanet 3.0-5.0 NX1
default_status: unknown
vendor: Siemens
product: blueplanet 360 NX3 M6
default_status: unknown
vendor: Siemens
product: blueplanet 50.0 NX3-60.0 NX3
default_status: unknown
vendor: Siemens
product: blueplanet 87.0 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 87.0 TL3 GEN2
default_status: unknown
vendor: Siemens
product: blueplanet 92.0 TL3
default_status: unknown
vendor: Siemens
product: blueplanet 92.0 TL3 GEN2
default_status: unknown
vendor: Siemens
product: blueplanet gridsave 110 TL3-S
default_status: unknown
vendor: Siemens
product: blueplanet gridsave 137 TL3-S
default_status: unknown
vendor: Siemens
product: blueplanet gridsave 92.0 TL3-S
default_status: unknown
vendor: Siemens
product: blueplanet hybrid 10.0 TL3
default_status: unknown
vendor: Siemens
product: blueplanet hybrid 6.0 NH3-12.0 NH3
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
baseScore: 6
baseSeverity: MEDIUM
Published: 2026-05-12T08:21:16.957Z