CVE-2026-8604

HIGH

In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious webpage.

CVSS v3.1 Score

8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 5/19/2026Modified: 5/21/2026

Related Intelligence (0)

No articles currently reference this CVE.

References (1)

https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-03Third Party AdvisoryUS Government Resource