CVE Catalog
CVE-2026-8603
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.32%
68th percentile - higher than 68% of all known CVEs
Summary
ScadaBR version 1.2.0 contains an OS command injection vulnerability. An attacker can execute arbitrary commands as root on the SCADA system.
Risk Assessment
An attacker can fully compromise the SCADA system, leading to industrial process disruption, data corruption, or sabotage.
Recommendation
Immediately upgrade ScadaBR to the latest patched version and restrict network access to the system.
Original NVD description (English source)
In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.