Skip to content
OpenAdvisories

Vendor

SCADA-LTS

5 known vulnerabilities.

Products

Scada-LTS 3 ScadaLTS 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-84860

    Scada-LTS DWR Authorization Bypass - Systemic

    ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring Security gates DWR endpoints by URL path pattern, but DWR itself dispatches method calls based on the POST body parameters c0-scriptName and c0-methodName. The crossDomainS…

    SCADA-LTS Scada-LTS
  • High 8.8
    CVE-2026-84858

    Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass

    ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the R…

    SCADA-LTS Scada-LTS