CVE-2026-9645

ScadaBR Authenticated Remote Code Execution PUBLISHED

Description (CNA)

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.

Affected (CNA)

Vendor / product	Versions
ScadaBR / ScadaBR	affected 1.2.0

CWE

CWE-78

References

https://www.tenable.com/security/research/tra-2026-46

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.