Missing Authentication Vulnerability in ScadaBR by ScadaBR
CVE-2026-8602

8.8HIGH

Key Information:

Vendor

Scadabr

Status
Scadabr
Vendor
CVE Published:
19 May 2026

What is CVE-2026-8602?

In ScadaBR version 1.2.0, a vulnerability exists that allows unauthorized attackers to send HTTP GET requests, potentially leading to the injection of arbitrary sensor readings into the SCADA system. This could compromise the integrity of the system and lead to significant operational risks. Organizations using this version must take immediate steps to mitigate the risk associated with this vulnerability.

Affected Version(s)

ScadaBR 1.2.0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
government-resource

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Arad Inbar, Nir Somech, Ben Grinberg, Daniel Lubel, Erez Cohen, and Adiel Sol of DREAM reported these vulnerabilities to CISA.
.