PatchTheCVEscadabr vulnerabilities and fixes
Recent CVEs affecting scadabr, with upgrade or downgrade steps. 6 tracked.
scadabr has 6 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-05-28. Highest priority: CVE-2026-8603 (score 57/100).
- CVE-2026-9646 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting issue exists in URL handling.
- CVE-2026-9645 CRITICAL 9.9 DOWNGRADE Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server
- CVE-2026-8603 CRITICAL 9.8 DOWNGRADE In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as
- CVE-2026-8602 CRITICAL 9.1 DOWNGRADE In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthen
- CVE-2026-8605 CRITICAL 9.8 DOWNGRADE In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the
- CVE-2026-8604 HIGH 8.8 DOWNGRADE In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action thr
FAQ
How do I fix scadabr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is scadabr being exploited right now?
None of the tracked scadabr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which scadabr CVE should I patch first?
CVE-2026-8603 currently ranks highest (57/100): In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as.