Vulnerability intelligence
CVE-2026-3869
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.
CVSS Score
9.2
Critical
EPSS — Exploit Probability
0.5%
Riskier than 45% of all CVEs · checked 2026-10-24
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Unconfirmed
Vendor fix published
1 article across 1 outlet · first covered Sep 9, 2026 · latest Sep 9, 2026
Coverage timeline
RSS-
ICS Patch Tuesday Fixes Critical Schneider, Siemens Flawswww.securityweek.com · Sep 9, 2026