CVE-2026-8602
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
ScadaBR version 1.2.0 has a missing authentication for critical function vulnerability, allowing an unauthenticated attacker to send HTTP GET requests to the SCADA system and inject arbitrary sensor readings.
Risk Assessment
An attacker can manipulate sensor data, potentially causing false alarms, incorrect operational decisions, or hiding real threats in the industrial system.
Recommendation
Implement authentication mechanisms for critical functions in ScadaBR or consider migrating to a newer, secure version of the system.
Original NVD description (English source)
In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings.