Quick answers
- Is CVE-2026-8604 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-8604 being exploited in the wild.
- How severe is CVE-2026-8604?
- Informational severity, with a CVSS score of 8.8, published 19 May 2026.
- Which products and versions are affected?
- ScadaBR ScadaBR 1.2.0.
- Is there a fix for CVE-2026-8604?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-8604 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-8604?
- Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A Cross-Site Request Forgery (CSRF) vulnerability exists in ScadaBR version 1.2.0 due to insufficient validation of request origins. An attacker can craft a malicious webpage or link that, when visited by an authenticated ScadaBR user, executes unauthorized commands with the victim's privileges. This attack vector requires the victim to have an active session and interact with the attacker's malicious content. Successful exploitation can lead to full compromise of the application's functionality, including administrative actions. As of the advisory date, the vendor has not responded to mitigation requests, and users are advised to isolate the system from the internet and use VPNs for remote access.
Affected products
- ScadaBR ScadaBR 1.2.0
Timeline
- 2026-05-19: advisory: CISA and NVD published the advisory.