CVE-2026-8603

8.7 highEPSS 1.3%

High (8.7) in scadabr scadabr. EPSS 1.3% chance of exploitation in the next 30 days.

In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.

Severity

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2026-05-19
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19