Skip to contentScadabr Scadabr vulnerabilities
- scadabrScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosureCVE-2026-941486.9 Medium
- scadabrScadaBR Unauthenticated Reflected Cross-Site ScriptingCVE-2026-96466.1 Medium
- scadabrScadaBR Authenticated Remote Code ExecutionCVE-2026-9645Public exploit9.9 Critical
- scadabrUse of Hard-coded Credentials in ScadaBRCVE-2026-86055.1 Medium
- scadabrCross-Site request forgery (CSRF) in ScadaBRCVE-2026-86048.6 High
- scadabrImproper neutralization of special elements used in an OS command ('OS command injection') in ScadaBRCVE-2026-86038.7 High
- scadabrMissing authentication for critical function in ScadaBRCVE-2026-86028.8 High
- scadabrScadaBR 1.12.4 is vulnerable to Session Fixation. The application assigns a JSESSIONID session...CVE-2025-709734.8 Medium
- openplc scadabrOpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated...CVE-2021-26828In KEVPublic exploitEPSS 39.1%8.8 High
- openplc scadabrOpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via...CVE-2021-26829In KEVEPSS 48.0%5.4 Medium
- scadabrA cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1...CVE-2019-163446.1 Medium
- scadabrScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as...CVE-2019-163216.1 Medium