Description
In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious webpage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ScadaBR | ScadaBR | 1.2.0 | — |
Advisories 1
- ICSA-26-139-03 ScadaBR CISA ICS & IT advisories · May 19, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-03 government-resource