Skip to content
OpenAdvisories
Critical ICSA-26-258-03 2 CVEs

mySCADA myPRO Manager

Published Sep 15, 2026 · Updated Sep 15, 2026

Vendor: mySCADA Product: mySCADA myPRO Manager

Summary

Successful exploitation of these vulnerabilities could allow an attacker to access privileged management functions or send arbitrary SMS messages through the connected GSM modem.

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-73807

    mySCADA myPRO Manager Missing Authorization

    The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

    mySCADA mySCADA myPRO
  • Medium 6.3
    CVE-2026-82567

    mySCADA myPRO Manager Missing Authorization

    The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and messag…

    mySCADA mySCADA myPRO

Revision history

  1. #1

    Initial Publication

References