SC
Product
Scada-LTS
27
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 1High 5Medium 21Low 0
Watch
Add Scada-LTS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19656 | 9.9 | Aug 12 | ScadaLTS Authenticated Remote Code Execution Affected: 2.7.8.1 |
| CVE-2026-84860 | 8.8 | Sep 16 | Scada-LTS DWR Authorization Bypass - Systemic Affected: 2.8.1 |
| CVE-2026-84858 | 8.8 | Sep 16 | Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass Affected: 2.8.1 |
| CVE-2025-13790 | 8.8 | Nov 30 | Scada-LTS cross-site request forgery Affected: 2.7.8.0; 2.7.8.1 |
| CVE-2023-33472 | 8.8 | Jan 13 | An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code,… Affected: through 2.7.5.2 |
| CVE-2022-41976 | 8.8 | Apr 10 | An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change… Affected: before 2.7.3 |
| CVE-2026-84859 | 6.5 | Sep 16 | Scada-LTS Authenticated Blind SQL Injection Affected: 2.8.1 |
| CVE-2025-13791 | 6.5 | Nov 30 | Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal Affected: 2.7.8.0; 2.7.8.1 |
| CVE-2025-9139 | 6.5 | Aug 19 | Scada-LTS WatchListDwr.init.dwr information disclosure Affected: 2.7.8.1 |
| CVE-2026-19657 | 6.1 | Aug 12 | ScadaLTS Unauthenticated Reflected XSS Affected: 2.7.8.1 |
| CVE-2025-9404 | 5.4 | Aug 25 | Scada-LTS Folder pointHierarchySLTS cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-9388 | 5.4 | Aug 24 | Scada-LTS watch_list.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-9235 | 5.4 | Aug 20 | Scada-LTS compound_events.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-9234 | 5.4 | Aug 20 | Scada-LTS maintenance_events.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-9233 | 5.4 | Aug 20 | Scada-LTS view_edit.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-9145 | 5.4 | Aug 19 | Scada-LTS SVG File view_edit.shtm cross site scripting Affected: 2.7.8.1 |
| CVE-2025-9144 | 5.4 | Aug 19 | Scada-LTS publisher_edit.shtm cross site scripting Affected: 2.7.8.1 |
| CVE-2025-9143 | 5.4 | Aug 19 | Scada-LTS mailing_lists.shtm cross site scripting Affected: 2.7.8.1 |
| CVE-2025-9138 | 5.4 | Aug 19 | Scada-LTS new cross site scripting Affected: 2.7.8.1 |
| CVE-2025-8743 | 5.4 | Aug 8 | Scada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-7729 | 5.4 | Jul 17 | Scada-LTS usersProfiles.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-7728 | 5.4 | Jul 17 | Scada-LTS users.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2024-7901 | 5.4 | Aug 17 | Scada-LTS Message Scada cross site scripting Affected: 2.7.8 |
| CVE-2025-10235 | 4.8 | Sep 11 | Scada-LTS Reports reports.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-10234 | 4.8 | Sep 10 | Scada-LTS Data Point Edit data_point_edit.shtm cross site scripting Affected: through 2.7.8.1 |
| CVE-2025-9137 | 4.8 | Aug 19 | Scada-LTS scheduled_events.shtm cross site scripting Affected: 2.7.8.1 |
| CVE-2026-115803 New | 4.3 | Oct 24 | Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization Affected: 2.8.0 |
Showing 27