Scadabr vulnerabilities

Products

• Scadabr 12

Newest

• scadabr ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure CVE-2026-94148 6.9 MediumSeptember 21, 2026
• scadabr ScadaBR Unauthenticated Reflected Cross-Site Scripting CVE-2026-9646 6.1 MediumMay 28, 2026
• scadabr ScadaBR Authenticated Remote Code Execution CVE-2026-9645 Public exploit 9.9 CriticalMay 28, 2026
• scadabr Use of Hard-coded Credentials in ScadaBR CVE-2026-8605 5.1 MediumMay 19, 2026
• scadabr Cross-Site request forgery (CSRF) in ScadaBR CVE-2026-8604 8.6 HighMay 19, 2026
• scadabr Improper neutralization of special elements used in an OS command ('OS command injection') in ScadaBR CVE-2026-8603 8.7 HighMay 19, 2026
• scadabr Missing authentication for critical function in ScadaBR CVE-2026-8602 8.8 HighMay 19, 2026
• scadabr ScadaBR 1.12.4 is vulnerable to Session Fixation. The application assigns a JSESSIONID session... CVE-2025-70973 4.8 MediumMarch 9, 2026
• openplc scadabr OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated... CVE-2021-26828 In KEVPublic exploit EPSS 39.1% 8.8 HighJune 11, 2021
• openplc scadabr OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via... CVE-2021-26829 In KEV EPSS 48.0% 5.4 MediumJune 11, 2021
• scadabr A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1... CVE-2019-16344 6.1 MediumOctober 14, 2019
• scadabr ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as... CVE-2019-16321 6.1 MediumSeptember 15, 2019