What is GHSA-4wh4-f7jw-q9v9?

GHSA-4wh4-f7jw-q9v9 is a security advisory published by GitHub Security Advisories with Critical severity. The mySCADA myPRO Manager command API does not properly enforce authentication for privileged...

Which CVE IDs does GHSA-4wh4-f7jw-q9v9 cover?

GHSA-4wh4-f7jw-q9v9 covers the following CVE IDs: CVE-2026-73807. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4wh4-f7jw-q9v9?

GHSA-4wh4-f7jw-q9v9 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-4wh4-f7jw-q9v9CriticalCVSS 9.8

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-73807 →

📋 Description

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-73807
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-03.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03
https://www.myscada.org/downloads/mySCADAPROManager
https://github.com/advisories/GHSA-4wh4-f7jw-q9v9