src_1653fbf8e2da6d59a7
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Sep 16, 2026 14:20 UTC
- Retrieved
- Oct 08, 2026 03:51 UTC
ScadaLTS Multiple Vulnerabilities
ScadaLTS Multiple Vulnerabilities ScadaLTS is an open-source, web-based SCADA/HMI application. Version 2.8.1-release-candidate build 0 is affected by multiple vulnerabilities:CVE-2026-84858: Authenticated Remote Code Execution via Scripting Sandbox Bypass (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-s
Reference details
- Source category
- Research & news
- Report title
ScadaLTS Multiple Vulnerabilities- First reported
- Sep 16, 2026 14:20 UTC
- Last reported
- Sep 16, 2026 14:20 UTC
- Catalog updated
- Oct 08, 2026 03:51 UTC
- Record ID
34781f62adad3f3ef4d3d8fc0b52cb4c3641112e28e3cf9509699a8392085108
CVEs mentioned by sources
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.