CVE-2026-73807

CVSS 9.8 (critical) · published 2026-09-15

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

Weakness: CWE-862

Source: NVD CVE-2026-73807

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-03.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03
• https://www.myscada.org/downloads/mySCADAPROManager/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.