Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/16 3:18 p.m.•14 views

CVE-2026-84858

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

8.8CVSS0.00838EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 2:51 p.m.•44 views

CVE-2026-84858 Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

8.8CVSS0.00838EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 2:51 p.m.•17 views

EUVD-2026-80825

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

8.8CVSS5.8AI score0.00838EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 2:51 p.m.•16 views

CVE-2026-84858 Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

8.8CVSS5.8AI score0.00838EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 2:51 p.m.•38 views

CVE-2026-84858

ScadaLTS 2.8.1-release-candidate build 0 is vulnerable to Authenticated Remote Code Execution via a scripting sandbox bypass. The DWR "DataSourceEditDwr" class exposes the "validateScript" method, which compiles and executes attacker-supplied JavaScript through the Rhino scripting engine without ...

8.8CVSS5.8AI score0.00838EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•3 views

CVE-2026-84858: Improper Control of Generation of Code

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...

8.8CVSS5.8AI score0.00838EPSS
SaveExploits0References2
Rows per page
Query Builder