CVE-2026-9645

9.9 criticalEPSS 0.4%

Critical (9.9) in scadabr scadabr. EPSS 0.4% chance of exploitation in the next 30 days.

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.

Severity

CVSS 3.1

9.9 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2026-05-28
Modified: 2026-08-17
Record from: the NVD, synced 2026-10-19

Affected

scadabr:scadabr

References

https://www.tenable.com/security/research/tra-2026-46

Check your stack JSON