Vulnerability intelligence

CVE-2026-8603

In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.

CVSS Score

8.7

High

EPSS — Exploit Probability

1.3%

Riskier than 68% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

unknown

Check vendor advisories

1 article across 1 outlet · first covered May 19, 2026 · latest May 19, 2026

Coverage timeline