Description
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mySCADA Technologies | mySCADA myPRO | ≤ 2.1 | 2.2 |
Advisories 1
- ICSA-26-258-03 mySCADA myPRO Manager CISA ICS & IT advisories · Sep 15, 2026