CVE-2026-73807: Myscada Technologies Myscada Mypro

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

Affected products

• Myscada Technologies Myscada Mypro: up to and including 2.1

Published 2026-09-15. Last modified 2026-09-18.