CVE-2026-9646 - ScadaBR Unauthenticated Reflected Cross-Site Scripting

MEDIUM

ScadaBR Unauthenticated Reflected Cross-Site Scripting

Published May 28, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.26%

A reflected cross-site scripting issue exists in URL handling.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
1.2.0	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-80

Link	Providers	Tags
https://www.tenable.com/security/research/tra-2026-46		Third Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner tenable

Published May 28, 2026

Updated May 29, 2026

Reserved May 26, 2026

Updated May 29, 2026

Status Analyzed

Modified Aug 17, 2026

Severity n/a

Public date n/a