As cited
Copy frozen at (site build).
vulnerabilities
mySCADA myPRO Manager
mySCADA myPRO Manager versions 2.1 and earlier contain two critical authentication flaws: CVE-2026-73807 allows unauthenticated attackers to access privileged management functions through the application programming interface (API), while CVE-2026-82567 exposes an unauthenticated HTTP endpoint that sends arbitrary SMS messages via a connected GSM modem. mySCADA Technologies released version 2.2 with fixes and recommends immediate updates.
Why it matters: Organizations running critical infrastructure systems (manufacturing, energy, water, transportation) worldwide using mySCADA myPRO Manager 2.1 or earlier face network-accessible remote code execution risks; update to version 2.2 immediately and segment these systems from the internet.
- Source published
- First seen by Cybersecurity Tracker