Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-73807

mySCADA myPRO Manager Missing Authorization

CVSS 3.1 9.8 CRITICALCVSS 4.0 9.3 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-73807

Published

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-73807

Published

mySCADA myPRO

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "mySCADA Technologies",
                    "product": "mySCADA myPRO",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThanOrEqual": "2.1",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "2.2"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON