CVE-2026-73807

Received Received - Intake

Unauthenticated Command API Access in mySCADA myPRO Manager

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: ICS-CERT

Description

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-73807

EUVD

EUVD-2026-80014

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

The mySCADA myPRO Manager command API lacks proper authentication checks for privileged functions. This allows unauthenticated attackers with network access to perform unauthorized administrative actions through the API.

Impact Analysis

An attacker could gain full control over the mySCADA system, modify configurations, access sensitive data, or disrupt operations without needing credentials. This could lead to system compromise, data breaches, or operational failures.

Compliance Impact

This vulnerability likely violates compliance requirements for access control and data protection in standards like GDPR and HIPAA. It enables unauthorized access to sensitive systems and data, which could result in regulatory penalties and loss of certification.

Mitigation Strategies

Immediately restrict network access to the myPRO Manager command API to trusted sources only. Update to the latest patched version of mySCADA myPRO if available. Monitor network traffic for unauthorized API access attempts.

Hi! I’m here to help you understand CVE-2026-73807. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70