8.8 HighCWE-306
CVE-2026-8602
Missing authentication for critical function in ScadaBR
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 39% of scored CVEs
SeverityCVSS
8.8High
Description NVD
In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings.
Coverage 1 article · 1 outlet
- ScadaBR bugs allow unauthenticated remote code execution on SCADACISA · first in our coverage · official notice