VulnSocial

CVE-2026-73807Patch

LOWCVSS 9.3 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 2 signals
  • Peaked at 2 mentions on most recent observed day (2026-09-16)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-15: 1Mentions · 2026-09-16: 2Patch / Workaround · 2026-09-15: 1Patch / Workaround · 2026-09-16: 2Technical Details · 2026-09-15: 1Technical Details · 2026-09-16: 109-1509-16
Signal classification1 categories
Patch
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-151
Patch1
2026-09-162
Patch2
Full discourse3 posts
  • SECNORA®@secnorainfosec
    Patch

    🚨CVE-2026-73807: Critical Missing Authorization Flaw in mySCADA myPRO Manager The command API skips authentication checks entirely, letting unauthenticated attackers reach admin-level functions over the network. CVSS 9.8, patched in v2.2. Read full blog:https://secnora.com/blog/cve-2026-73807-myscada-vulnerability/

    Post summary

    The text discloses a critical CVSS 9.8 missing authorization vulnerability in mySCADA myPRO Manager and explicitly notes it has been patched in version 2.2, making the primary classification Patch per the indicator rules.

    0001039
    76 followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    Discover the latest mySCADA myPRO Manager vulnerabilities, including CVE-2026-73807, and learn how to patch your systems to prevent remote attacks. #mySCADA #CVE202673807 #Cybersecurity #Vulnerability https://securityonline.info/myscada-mypro-manager-vulnerabilities/

    Post summary

    The text highlights CVE-2026-73807 in mySCADA myPRO Manager and emphasizes learning how to patch systems to prevent remote attacks. It does not provide PoC, exploit code, active exploitation evidence, or detailed technical vulnerability information.

    00000400
    13.0K followersView on X
  • Windows Forum@windowsforum
    Patch

    🚨 myPRO Manager 2.1 and earlier can expose privileged APIs—and let attackers spam SMS via a GSM modem. Upgrade to 2.2 after testing, because “industrial control” shouldn’t mean open season. https://windowsforum.com/news/cve-2026-73807-mypro-manager-2-2-fixes-api-authentication-bypass.444495/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsServer #Myscada #IndustrialCybersecurity #ScadaSecurity https://t.co/cd53srU7L1

    Post summary

    The tweet discloses CVE-2026-73807 affecting myPRO Manager 2.1 and earlier, describing a privileged API authentication bypass that could allow SMS spamming via a GSM modem, and advises upgrading to version 2.2 as remediation.

    0000042
    1.4K followersView on X

Explore more

Back to dashboard