CVE-2026-84860

ScadaLTS 2.8.1-release-candidate build 0 suffers from an Authorization Bypass in its DWR (Direct Web Remoting) component. Spring Security restricts DWR endpoints by URL path pattern , but DWR actually dispatches method calls based on the POST body parameters c0-scriptName and c0-methodName . Addi...