CVE-2026-9646

Description

References

• tenable.com/security/research/tra-2026-46 · Third Party Advisory

Weitere Schwachstellen in scadabr

• CVE-2026-9645KRITISCH 9.9Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full acces…
• CVE-2026-8605KRITISCH 9.8In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin.
• CVE-2026-8604HOCH 8.8In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by lur…
• CVE-2026-8603KRITISCH 9.8In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.
• CVE-2026-8602KRITISCH 9.1In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTT…