CVE-2026-94148— ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure
Quick assessment
Affected
n/a ScadaBR
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 ScadaBR 1.1 及更早版本中发现了一个漏洞。受影响的组件为“项目导出端点”（Export Project Endpoint）中 文件里的 函数。该函数的不当操作可能导致信息泄露。此攻击可被远程发起。该漏洞的利用方法已被公开披露，可能被利用。建议升级到 1.2.0 版本以修复此问题。补丁名称：c852b4988a15bce6011ef169299ad604538f70a9。应升级受影响的组件。导入路径此前已通过 进行权限控制；唯独导出操作未被保护，从而存在安全缺口。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-94148
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of the file /ScadaBR/export_project.htm of the component Export Project Endpoint. This manipulation causes information disclosure. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.2.0 is recommended to address this issue. Patch name: c852b4988a15bce6011ef169299ad604538f70a9. The affected component should be upgraded. Import path was already gated with Permissions.ensureAdmin(); only export was left unprotected.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | ScadaBR | 1.0 |
cpe:2.3:a:scadabr:scadabr:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-94148
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-94148
请登录查看更多情报信息。
Other References for CVE-2026-94148 (4)
-
https://vuldb.com/submit/894000 third-party-advisory
Same Patch Batch · n/a · 2026-09-21 · 4 CVEs total
| CVE-2026-94110 | 7.3 HIGH | QCMS Content Detail Controllers.php self_Tmp sql injection |
| CVE-2026-94103 | 4.7 MEDIUM | RooCMS Frontend Rendering site_pagePHP.php eval code injection |
| CVE-2026-94102 | 4.3 MEDIUM | WuzhiCMS Login index.php redirect |
IV. Related Vulnerabilities
Same product: ScadaBR
-
CVE-2026-9646
ScadaBR Unauthenticated Reflected Cross-Site Scripting -
CVE-2026-9645
ScadaBR Authenticated Remote Code Execution -
CVE-2026-8605
Use of Hard-coded Credentials in ScadaBR -
CVE-2026-8604
Cross-Site request forgery (CSRF) in ScadaBR -
CVE-2026-8603
Improper neutralization of special elements used in an OS co
Same vendor: n/a
-
CVE-2026-94110
QCMS Content Detail Controllers.php self_Tmp sql injection -
CVE-2026-94103
RooCMS Frontend Rendering site_pagePHP.php eval code injecti -
CVE-2026-94102
WuzhiCMS Login index.php redirect -
CVE-2026-94094
OpenClaw Canvas Host Route server.ts createCanvasHostHandler -
CVE-2026-94043
Free5GC Gmm handler.go race condition
Same weakness: CWE-200
-
CVE-2026-94050
D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_k -
CVE-2026-93971
aiyiyi121 SxDevOps settings.py information disclosure -
CVE-2026-9289
WordLift <= 3.54.10 - Unauthenticated Sensitive Information -
CVE-2026-1255
YS LeadGen – Popups, Opt-ins & Lead Capture <= 2.1.4 - Unaut -
CVE-2026-92708
devalue: Cross-request process memory disclosure in devalue
V. Comments for CVE-2026-94148
No comments yet