Is CVE-2026-8605 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8605 being exploited in the wild.

How severe is CVE-2026-8605?

Informational severity, with a CVSS score of 6.1, published 19 May 2026.

Is there a fix for CVE-2026-8605?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-8605 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-8605?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8605: ScadaBR hard-coded credentials in SCADA system

CVE-2026-8605 · Severity: info · CVSS 6.1 · Published 2026-05-19

ScadaBR is an open-source software platform used to manage and monitor industrial control systems (ICS) in sectors like energy, water, and manufacturing. A security flaw in version 1.2.0 involves the use of fixed, unchangeable login credentials within the software. If discovered, an attacker could use these credentials to gain administrative access to the system, potentially allowing them to interfere with critical infrastructure operations or view sensitive industrial data.

Quick answers

Is CVE-2026-8605 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8605 being exploited in the wild.
How severe is CVE-2026-8605?: Informational severity, with a CVSS score of 6.1, published 19 May 2026.
Which products and versions are affected?: ScadaBR ScadaBR 1.2.0.
Is there a fix for CVE-2026-8605?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-8605 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-8605?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Use of Hard-coded Credentials vulnerability (CWE-798) exists in ScadaBR version 1.2.0. The software contains fixed authentication secrets that are not unique to the installation, which can be leveraged by an attacker to authenticate as an administrator. While the CVSS vector indicates a requirement for user interaction (UI:R), the primary root cause is the presence of static credentials within the application code or configuration. Successful exploitation grants full administrative privileges over the SCADA environment. As of the advisory date, the vendor has not responded to mitigation requests, and no official patch is available; users are advised to isolate the system from the internet and use VPNs for remote access.

Affected products

ScadaBR ScadaBR 1.2.0

Timeline

2026-05-19: advisory: Initial publication of ICSA-26-139-03
2026-05-19: disclosed

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-03

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.