CSRF Vulnerability in ScadaBR Software by ScadaBR
CVE-2026-8604

8.6HIGH

Key Information:

Vendor

Scadabr

Status
Scadabr
Vendor
CVE Published:
19 May 2026

What is CVE-2026-8604?

A vulnerability exists in ScadaBR version 1.2.0 that enables cross-site request forgery (CSRF) attacks. This flaw could allow an attacker to exploit the session of a logged-in user, triggering any authenticated action without the user's consent. By enticing the victim to visit a malicious webpage, the attacker could manipulate actions within the ScadaBR environment, potentially compromising sensitive data and system integrity.

Affected Version(s)

ScadaBR 1.2.0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
government-resource

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Arad Inbar, Nir Somech, Ben Grinberg, Daniel Lubel, Erez Cohen, and Adiel Sol of DREAM reported these vulnerabilities to CISA.
.