What’s Vulnerable › Products

ScadaBR vulnerabilities

11 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your ScadaBR version is affected

Exploited ScadaBR vulnerabilities

• CVE-2021-26828 — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
• CVE-2021-26829 — OpenPLC ScadaBR Cross-site Scripting Vulnerability

Latest ScadaBR vulnerabilities

• CVE-2026-9646 — ScadaBR Unauthenticated Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2026-9645 — ScadaBR Authenticated Remote Code Execution (CVSS 9.9)
• CVE-2026-8605 — Use of Hard-coded Credentials in ScadaBR (CVSS 9.8)
• CVE-2026-8604 — Cross-Site request forgery (CSRF) in ScadaBR (CVSS 8.8)
• CVE-2026-8603 — Improper neutralization of special elements used in an OS command ('OS command injection') in ScadaBR (CVSS 9.8)
• CVE-2026-8602 — Missing authentication for critical function in ScadaBR (CVSS 9.1)
• CVE-2025-70973 — (CVSS 4.8)
• CVE-2021-26829 — OpenPLC ScadaBR Cross-site Scripting Vulnerability (CVSS 5.4) — exploited
• CVE-2021-26828 — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability (CVSS 8.8) — exploited
• CVE-2019-16344 — (CVSS 6.1)
• CVE-2019-16321 — (CVSS 6.1)