What is CVE-2026-73807?

CVE-2026-73807 is a critical-severity vulnerability in Myscada Technologies Mypro, classified under Missing Authorization. CVSS score: 9.8/10. Published 2026-09-15.

How severe is CVE-2026-73807?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Myscada Technologies Mypro

CVE-2026-73807

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Myscada Technologies Mypro

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2026-73807?: CVE-2026-73807 is a critical-severity vulnerability in Myscada Technologies Mypro, classified under Missing Authorization. CVSS score: 9.8/10. Published 2026-09-15.
How severe is CVE-2026-73807?: Critical severity. CVSS v3 base score is 9.8 out of 10.