CVE-2026-8603: Improper neutralization of special elements used in an OS command ('OS command injection') in ScadaBR
Published May 19, 2026
·Updated
In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.
Affected Software
2 affected components
ScadaBR ScadaBR=1.2.0
ScadaBR ScadaBR=1.2
Event History
May 19, 2026
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
DescriptionWeakness
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Jun 29, 58424
Event
via FIRST·03:21 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-8603?
The severity of CVE-2026-8603 is rated high with a CVSS score of 8.7.
2
How do I fix CVE-2026-8603?
To fix CVE-2026-8603, update ScadaBR to the latest version where the vulnerability has been addressed.
3
What vulnerabilities are associated with CVE-2026-8603?
CVE-2026-8603 is associated with OS Command Injection and Command Injection vulnerabilities.
4
What can an attacker do with CVE-2026-8603?
An attacker can exploit CVE-2026-8603 to execute commands as root on the SCADA system.
5
Which version of ScadaBR is affected by CVE-2026-8603?
CVE-2026-8603 affects ScadaBR version 1.2.0.