CVE-2026-275469.8CriticalCWE-288
Authentication Bypass in _account_log
Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D
Not in CISA KEVVendor fix available
1.0%probability of exploitation in the next 30 days
63rd percentile
050100
Higher than 63% of scored CVEs
9.8CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an admin, even when accounts are properly configured.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 16 Sep.
- Critical flaws let attackers seize industrial controllers from three vendorsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.