CVE-2026-73807 in myPRO

Résumé

par MITRE • 15/09/2026

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Icscert
• Réserver: 08/09/2026
• Divulgation: 15/09/2026
• Modérer: accepté
• Entrée: VDB-404891
• CPE: prêt
• CWE: CWE-269 (confirmé)
• CVSS: 9.8 (CNA)
• EPSS: 0.00000
• KEV: non
• Activités: très faible
• Secteur: Industry, Energy, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-73807
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73807
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-73807/