Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-8602

Missing authentication for critical function in ScadaBR

Description

In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ScadaBR ScadaBR

Default version status: unaffected

  • 1.2.0affected

References