Zyxel CVE-2026-107441 is exploited in the wild; Google Chrome, HPE networking, and Phoenix Contact PLCnext Engineer advisories also demand patching.
-
IOCs: CVE-2026-107441
-
#ICSOT #SecurityAdvisory #ThreatIntel #Vulnerability
Zyxel CVE-2026-107441 is exploited in the wild; Google Chrome, HPE networking, and Phoenix Contact PLCnext Engineer advisories also demand patching.
-
IOCs: CVE-2026-107441
-
#ICSOT #SecurityAdvisory #ThreatIntel #Vulnerability
📊 6.9/10
🏢 PHOENIX CONTACT
📝 PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over canonicalized `Signe...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116802
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 PHOENIX CONTACT
📝 PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over canonicalized `Signe...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116802
#cybersecurity #infosec #cve #euvd
VDE-2026-084
Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in License Validation in the PLCnext Firmware
CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576
This advisory addresses security vulnerabilities in Phoenix Contact products with […]
VDE-2026-084
Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in License Validation in the PLCnext Firmware
CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576
This advisory addresses security vulnerabilities in Phoenix Contact products with […]
VDE-2026-121
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
CVE-2026-110021, CVE-2026-110022, CVE-2026-110935
GSDX SignatureValue verification, signed […]
VDE-2026-121
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
CVE-2026-110021, CVE-2026-110022, CVE-2026-110935
GSDX SignatureValue verification, signed […]
VDE-2026-090
Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE
CVE-2025-15467, CVE-2025-69419
Festo AX OS versions 25.0.1.46 and 25.9.2.4, which are based on PLCnext by Phoenix Contact, used by the Festo product CEPE are affected by multiple OpenSSL […]
VDE-2026-090
Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE
CVE-2025-15467, CVE-2025-69419
Festo AX OS versions 25.0.1.46 and 25.9.2.4, which are based on PLCnext by Phoenix Contact, used by the Festo product CEPE are affected by multiple OpenSSL […]
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication...
https://www.thehackerwire.com/vulnerability/CVE-2025-41770/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication...
https://www.thehackerwire.com/vulnerability/CVE-2025-41770/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE ID : CVE-2025-41770
Published : Aug. 12, 2026, 8:06 a.m. | 21 minutes ago
Description : An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote atta...
CVE ID : CVE-2025-41770
Published : Aug. 12, 2026, 8:06 a.m. | 21 minutes ago
Description : An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote atta...
📊 8.7/10
🏢 PHOENIX CONTACT
📝 The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209952
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 PHOENIX CONTACT
📝 The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209952
#cybersecurity #infosec #cve #euvd
#PhoenixContact #PLCnext #SQLInjection #CVE202541771 #ICS #OTSecurity #Cybersecurity
#PhoenixContact #PLCnext #SQLInjection #CVE202541771 #ICS #OTSecurity #Cybersecurity