CVE-2026-73807

Critical9.8Published on September 15, 2026

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-862

Vulnerabilities

Critical mySCADA myPRO Manager Flaw Exposes Privileged Controls Without Authentication

CISA discloses critical unauthenticated flaw CVE-2026-73807 in mySCADA myPRO Manager 2.1 and earlier plus SMS gateway bug with no patch.

Sep 16, 202603:465 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Critical mySCADA myPRO Manager Flaw Exposes Privileged Controls Without Authentication