CVE-2022-45088

9.8 criticalEPSS 0.7%

Critical (9.8) in gruparge smartpower web. EPSS 0.7% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower Web: before 23.01.01.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2023-02-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gruparge:smartpower_web

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0066
https://www.usom.gov.tr/bildirim/tr-23-0066
https://www.usom.gov.tr/bildirim/tr-23-0066

Check your stack JSON