CVE-2026-19656

creationtimestamp| type| source ---|---|--- 2026-08-12 21:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvzjlmxpg2b...

CVE-2026-19656 ScadaLTS Authenticated Remote Code Execution

ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user including one holding only low-privilege, read-only permissions to execute arbitrary operating system commands on the host. Successful exploitation results in code execution in the conte...

CVE-2026-19656

CVE-2026-19656 affects ScadaLTS 2.7.8.1, where a server-side method lacks authorization checks. Any authenticated user (even with low-privilege, read-only rights) can execute arbitrary operating system commands on the host, yielding code execution in the ScadaLTS server process (root) and full sy...