Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-9645 Arbitrary JavaScript Code Execution with Root Privileges in Authenticated Server Environment https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9645
Post summary
CVE-2026-9645 is a newly disclosed vulnerability that enables arbitrary JavaScript code execution with root privileges in an authenticated server environment.
CVE-2026-9645: ScadaBR Authenticated Remote Code Execution - What It Means for Your Business and How to Respond https://hubs.li/Q04lJgy90
Post summary
The brief article announces CVE‑2026‑9645 as an authenticated remote code execution flaw in ScadaBR, offering a high‑level overview without providing PoC, exploitation details, or remediation specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | scadabr | scadabr | 1.2 | - | - |