CVE-2026-9645

CVE-2026-9645 · ScadaBR Authenticated Remote Code Execution

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.

CVSS 9.9 · Critical · EPSS 0.4% · Public exploit

Published

2026-05-28T20:30:13.813Z

Updated

2026-05-29T14:51:41.509Z

Check your server →