Login Request a demo
SC
Product
ScadaBR
by Scadabr · last CVE Sep 21, 2026
On CISA KEVExploited in the wild
12
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities12In the news2Timeline
Severity mix
Critical 4High 2Medium 6Low 0
Severity
All severities12Critical4High2Medium6Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add ScadaBR to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-26828
In wildKEV
8.8
39%
Jun 11
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
Affected: through 0.9.1; through 1.12.4
CVE-2021-26829
In wildKEV
5.4
48%
Jun 11
OpenPLC ScadaBR Cross-site Scripting Vulnerability
Affected: through 0.9.1; through 1.12.4
CVE-2026-9645
9.9
0%
May 28
ScadaBR Authenticated Remote Code Execution
Affected: 1.2.0
CVE-2026-8605
9.8
0%
May 19
Use of Hard-coded Credentials in ScadaBR
Affected: 1.2.0
CVE-2026-8603
9.8
1%
May 19
Improper neutralization of special elements used in an OS command ('OS command injection') in ScadaBR
Affected: 1.2.0
CVE-2026-8602
9.1
0%
May 19
Missing authentication for critical function in ScadaBR
Affected: 1.2.0
CVE-2026-8604
8.8
0%
May 19
Cross-Site request forgery (CSRF) in ScadaBR
Affected: 1.2.0
CVE-2026-9646
6.1
0%
May 28
ScadaBR Unauthenticated Reflected Cross-Site Scripting
Affected: 1.2.0
CVE-2019-16344
6.1
1%
Oct 14
A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username…
Affected: 1.0ce
CVE-2019-16321
6.1
1%
Sep 15
ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO
Affected: 1.0ce; 1.1.0
CVE-2026-94148
5.3
1%
Sep 21
ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure
Affected: 1.0; 1.1
CVE-2025-70973
4.8
0%
Mar 9
ScadaBR 1.12.4 is vulnerable to Session Fixation
Affected: 1.12.4
Showing 12