Browse CVEs

MEDIUM 6.1 CVE-2026-9646 A reflected cross-site scripting issue exists in URL handling. Scadabr No fix yet Fix from $1,6002026-05-28 CRITICAL 9.9 CVE-2026-9645 Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabli… Scadabr Mitigation only Fix from $2,3002026-05-28 CRITICAL 9.8 CVE-2026-8605 In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin. Scadabr Mitigation only Fix from $2,3002026-05-19 HIGH 8.8 CVE-2026-8604 In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any l… Scadabr Mitigation only Fix from $1,9502026-05-19 CRITICAL 9.8 CVE-2026-8603 In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system. Scadabr Mitigation only Fix from $2,3002026-05-19 CRITICAL 9.1 CVE-2026-8602 In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET req… Scadabr Mitigation only Fix from $2,3002026-05-19 MEDIUM 6.1 CVE-2019-16344 A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web s… Scadabr No fix yet Fix from $1,6002019-10-14 MEDIUM 6.1 CVE-2019-16321 ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO. Scadabr No fix yet Fix from $1,6002019-09-15