{"id":"CVE-2026-9645","state":"PUBLISHED","title":"ScadaBR Authenticated Remote Code Execution","description":"Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.","publishedAt":"2026-05-28T20:30:13.813Z","updatedAt":"2026-05-29T14:51:41.509Z","severity":{"score":9.9,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","source":"tenable"},"assigner":"tenable","products":["ScadaBR ScadaBR"],"affected":[{"vendor":"ScadaBR","product":"ScadaBR","defaultStatus":"unaffected","versions":[{"version":"1.2.0","status":"affected","versionType":"semver"}]}],"references":["https://www.tenable.com/security/research/tra-2026-46"],"weaknesses":["CWE-78"],"ingestedAt":"2026-10-29T20:13:52.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/9xxx/CVE-2026-9645.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-9645","state":"PUBLISHED","datePublished":"2026-05-28T20:30:13.813Z","dateUpdated":"2026-05-29T14:51:41.509Z","assignerShortName":"tenable","assignerOrgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be","dateReserved":"2026-05-26T19:08:24.402Z"},"containers":{"cna":{"title":"ScadaBR Authenticated Remote Code Execution","descriptions":[{"lang":"en","value":"Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root."}],"affected":[{"vendor":"ScadaBR","product":"ScadaBR","defaultStatus":"unaffected","versions":[{"version":"1.2.0","status":"affected","versionType":"semver"}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2026-46"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":9.9,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","lang":"en","description":"CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"tenable","orgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be","dateUpdated":"2026-05-28T20:32:50.620Z"},"datePublic":"2026-05-28T20:35:00.000Z","impacts":[{"capecId":"CAPEC-549","descriptions":[{"lang":"en","value":"CAPEC-549 Local Execution of Code"}]}],"credits":[{"lang":"en","value":"Derrie Sutton with Tenable","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-29T14:51:27.068184Z","id":"CVE-2026-9645","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-29T14:51:41.509Z"}}]}}}