PT-2026-44538
CVE-2026-9645
·
Published
2026-05-28
·
Updated
2026-07-21
Description by
CVSS 3.1
9.9
CriticalMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ScadaBR version 1.2.0
Description
Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. These scripts execute with full access, enabling complete system compromise as commands are executed as root.
Recommendations
Update ScadaBR version 1.2.0 to a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾