Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2026-9645

ScadaBR Authenticated Remote Code Execution

Description

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ScadaBR ScadaBR

Default version status: unaffected

  • 1.2.0affected

References