https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-25067.htmlhttps://patchthecve.com/cve/CVE-2025-25067.htmlWed, 17 Jun 2026 09:00:14 +0000CRITICAL 9.8: mySCADA myPRO Manager is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands.https://patchthecve.com/cve/CVE-2025-24865.htmlhttps://patchthecve.com/cve/CVE-2025-24865.htmlWed, 17 Jun 2026 08:59:45 +0000CRITICAL 10.0: The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated password.https://patchthecve.com/cve/CVE-2025-23411.htmlhttps://patchthecve.com/cve/CVE-2025-23411.htmlWed, 17 Jun 2026 08:54:09 +0000MEDIUM 6.3: mySCADA myPRO Manager is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to obtain sensitive information. An attacker would need to trick the victim in to visiting an attacker-controlled website.https://patchthecve.com/cve/CVE-2025-22896.htmlhttps://patchthecve.com/cve/CVE-2025-22896.htmlWed, 17 Jun 2026 08:50:50 +0000HIGH 8.6: mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to obtain sensitive information.https://patchthecve.com/cve/CVE-2024-4708.htmlhttps://patchthecve.com/cve/CVE-2024-4708.htmlWed, 17 Jun 2026 08:02:27 +0000CRITICAL 9.8: mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device.