EIP-2026-103321

PRE-CVE

ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103321. PoCs published by Fellipe Oliveira.

AI-analyzed exploit summary This exploit demonstrates an authenticated arbitrary file upload vulnerability in ScadaBR 1.0-1.1CE, allowing a JSP webshell to be uploaded and executed to achieve remote code execution (RCE) via a reverse shell.

Description

ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2)

Exploits (1)

exploitdb WORKING POC VERIFIED
by Fellipe Oliveira · pythonwebappslinux
https://www.exploit-db.com/exploits/49735

This exploit demonstrates an authenticated arbitrary file upload vulnerability in ScadaBR 1.0-1.1CE, allowing a JSP webshell to be uploaded and executed to achieve remote code execution (RCE) via a reverse shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: ScadaBR 1.0, 1.1CE, and 1.0 for Linux
Auth required
Prerequisites: Valid credentials for ScadaBR · Network access to the target · Reverse shell listener setup
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026