CVE-2026-73807 in myPRO

Sumário

de MITRE • 15/09/2026

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Icscert
• Reservar: 08/09/2026
• Divulgação: 15/09/2026
• Moderação: aceite
• Entrada: VDB-404891
• CPE: pronto
• CWE: CWE-269 (confirmado)
• CVSS: 9.8 (CNA)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Pharma, Agriculture, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-73807
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73807
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-73807/