poslední zpráva
SPOJENO AI EPSS < 0.01 (nejvyšší)
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
[VDE-2026-121] GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities have been identified in PLCnext Engineer prior to version 2026.6. The effects of these vulnerabilities may result in a complete loss of confidentiality, integrity and availability.
Phoenix Contact CA DE
CVE v události 3
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-110021 | 6.9 4.0 · CERTVDE 6.2 3.1 · CERTVDE | – | < 0.01 |
| CVE-2026-110022 | 8.6 4.0 · CERTVDE 8.4 3.1 · CERTVDE | – | < 0.01 |
| CVE-2026-110935 | 8.6 4.0 · CERTVDE 8.4 3.1 · CERTVDE | – | < 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.
Jak se o tom psalo 2
-
· Cyber Centre Kanada CA
[Control Systems] Phoenix Contact security advisory (AV26-1121)
Serial number: AV26-1121 Date: November 4, 2026 As of November 4, 2026, Phoenix Contact is affected by vulnerabilities in the following product: PLCnext Engineer Prior to 2026.6 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Phoenix Contact GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software Phoenix Contact…
-
· CERT@VDE DE nadpis události
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
[VDE-2026-121] GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities have been identified in PLCnext Engineer prior to version 2026.6. The effects of these vulnerabilities may result in a complete loss of confidentiality, integrity and availability.