SC
Vendor
Scadabr
12
CVEs
2
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94148 | SC ScadaBR Scadabr | 5.3 | Sep 21 | ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure |
| CVE-2026-9646 | SC ScadaBR ScadaBR | 6.1 | May 28 | ScadaBR Unauthenticated Reflected Cross-Site Scripting |
| CVE-2026-9645 | SC ScadaBR ScadaBR | 9.9 | May 28 | ScadaBR Authenticated Remote Code Execution |
| CVE-2026-8605 | SC ScadaBR ScadaBR | 9.8 | May 19 | Use of Hard-coded Credentials in ScadaBR |
| CVE-2026-8604 | SC ScadaBR ScadaBR | 8.8 | May 19 | Cross-Site request forgery (CSRF) in ScadaBR |
| CVE-2026-8603 | SC ScadaBR ScadaBR | 9.8 | May 19 | Improper neutralization of special elements used in an OS command ('OS command injection') in ScadaBR |
| CVE-2026-8602 | SC ScadaBR ScadaBR | 9.1 | May 19 | Missing authentication for critical function in ScadaBR |
| CVE-2025-70973 | SC Scadabr Scadabr | 4.8 | Mar 9 | ScadaBR 1.12.4 is vulnerable to Session Fixation |
| CVE-2021-26828 In wildKEV | SC Scadabr Scadabr | 8.8 | Jun 11 | OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability |
| CVE-2021-26829 In wildKEV | SC Scadabr Scadabr | 5.4 | Jun 11 | OpenPLC ScadaBR Cross-site Scripting Vulnerability |
| CVE-2019-16344 | SC Scadabr Scadabr | 6.1 | Oct 14 | A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username… |
| CVE-2019-16321 | SC Scadabr Scadabr | 6.1 | Sep 15 | ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO |