CVE-2026-73807criticalCWE-862

CVE-2026-73807: critical vulnerability in mySCADA myPRO

mySCADA myPRO Manager Missing Authorization

Published · Updated

Follow this CVE+ Monitor myPRO

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.8%
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
mySCADA Technologies · mySCADA myPRO
Related CVEs — mySCADA myPRO

In the same product, most dangerous first.

CVE-2023-28384HIGHCVE-2023-28384EPSS 44.8%CVE-2022-2234CRITICALmySCADA myPRO Command InjectionEPSS 43.2%CVE-2023-28400HIGHCVE-2023-28400EPSS 24.6%CVE-2023-28716HIGHCVE-2023-28716EPSS 4.5%CVE-2023-29169HIGHCVE-2023-29169EPSS 0.7%CVE-2023-29150HIGHCVE-2023-29150EPSS 0.7%