8.6 HighCWE-352
CVE-2026-8604
Cross-Site request forgery (CSRF) in ScadaBR
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 24 Oct
0.2%probability of exploitation in the next 30 days
Higher than 10% of scored CVEs
SeverityCVSS
8.6High
Description NVD
In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious webpage.
Coverage 1 article · 1 outlet
- ScadaBR bugs allow unauthenticated remote code execution on SCADACISA · first in our coverage · official notice · mentions it in passing