CVE-2026-8602

CRITICAL

In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings.

CVSS v3.1 Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Attack Vector

NETWORK

Complexity

LOW

Privileges

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

HIGH

Published: 5/19/2026Modified: 5/21/2026

Related Intelligence (0)

No articles currently reference this CVE.

References (1)

https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-03Third Party AdvisoryUS Government Resource