CVE-2026-84858

Summary

The flaw allows an attacker with low privileges to execute arbitrary code via the Scripting Sandbox Bypass in ScadaLTS 2.8.1-release-candidate build 0, due to lack of authorization checks.

Exploitability

Exploitation is relatively straightforward given the lack of authorization checks, requiring an authenticated low-privilege user to leverage the DWR routing bypass.

Blast radius

If exploited, the impact could be severe, potentially leading to full system compromise and control of the SCADA system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to ScadaLTS 2.8.1-release-candidate build 1 or later, which addresses this vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.