Product by SCADA-LTS
Scada-LTS
26 known vulnerabilities in Scada-LTS (SCADA-LTS), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-84858 | Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass | 8.8 | |
| Critical | CVE-2022-41976 | Scada-LTS: Privilege Escalation | 9.9 | |
| Critical | CVE-2026-19656 | ScadaLTS Authenticated Remote Code Execution | 9.9 | |
| High | CVE-2023-33472 | Scada-LTS: Information Disclosure | 8.8 | |
| High | CVE-2026-84860 | Scada-LTS DWR Authorization Bypass - Systemic | 8.8 | |
| Medium | CVE-2026-84859 | Scada-LTS Authenticated Blind SQL Injection | 6.5 | |
| Medium | CVE-2025-13791 | Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal | 6.3 | |
| Medium | CVE-2026-19657 | ScadaLTS Unauthenticated Reflected XSS | 6.1 | |
| Medium | CVE-2025-9144 | Scada-LTS publisher_edit.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9143 | Scada-LTS mailing_lists.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9139 | Scada-LTS WatchListDwr.init.dwr information disclosure | 4.3 | |
| High | CVE-2025-13790 | Scada-LTS cross-site request forgery | 4.3 | |
| Medium | CVE-2025-8743 | Scada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-7729 | Scada-LTS usersProfiles.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-7728 | Scada-LTS users.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9137 | Scada-LTS scheduled_events.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9388 | Scada-LTS watch_list.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9235 | Scada-LTS compound_events.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9234 | Scada-LTS maintenance_events.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9233 | Scada-LTS view_edit.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9145 | Scada-LTS SVG File view_edit.shtm cross site scripting | 3.5 | |
| Medium | CVE-2025-9138 | Scada-LTS new cross site scripting | 3.5 | |
| Medium | CVE-2025-10234 | Scada-LTS Data Point Edit data_point_edit.shtm cross site scripting | 2.4 | |
| Medium | CVE-2024-7901 | Scada-LTS Message Scada cross site scripting | 3.5 | |
| Medium | CVE-2025-10235 | Scada-LTS Reports reports.shtm cross site scripting | 2.4 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,