8.7 HighCWE-78
CVE-2026-8603
Improper neutralization of special elements used in an OS command ('OS command injection') in ScadaBR
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
2.1%probability of exploitation in the next 30 days
Higher than 81% of scored CVEs
SeverityCVSS
8.7High
Description NVD
In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.
Coverage 1 article · 1 outlet
- ScadaBR bugs allow unauthenticated remote code execution on SCADACISA · first in our coverage · official notice · mentions it in passing