CVE-2026-82567

Medium6.3Published on September 15, 2026

The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the specified SMS message. An unauthenticated attacker with network access to the notification gateway could exploit this vulnerability to send arbitrary SMS messages through the connected modem.

CVSS score6.3 / 10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness type (CWE)CWE-862

Vulnerabilities

Critical mySCADA myPRO Manager Flaw Exposes Privileged Controls Without Authentication

CISA discloses critical unauthenticated flaw CVE-2026-73807 in mySCADA myPRO Manager 2.1 and earlier plus SMS gateway bug with no patch.

Sep 16, 202603:465 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Critical mySCADA myPRO Manager Flaw Exposes Privileged Controls Without Authentication