What’s Vulnerable › Vulnerabilities

CVE-2026-73807: mySCADA myPRO Manager Missing Authorization

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-15 · updated 2026-09-18
• Weakness: CWE-862

Description

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

Affected products

• mySCADA myPRO: through 2.1

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-03.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03
• https://www.myscada.org/downloads/mySCADAPROManager/

Get alerted when CVE-2026-73807 or the next vulnerability affects your stack