← Database

CVE-2026-8602

CRITICAL CVSS: 9.1 Published: 2026-05-19 Modified: 2026-07-23

Description

In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings.

Affected Platforms

Scadabr Scadabr

Weakness Type

CWE-306

References