CVE-2025-20061: Myscada Mypro Manager

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

Affected products

• Myscada Mypro Manager: before 1.3 (fixed in 1.3)
• Myscada Mypro Runtime: before 9.2.1 (fixed in 9.2.1)

Published 2025-01-29. Last modified 2026-06-17.