8.6 HighCWE-306
CVE-2026-4436
GPL Odorizers GPL750 Missing Authentication for Critical Function
GPL OdorizersGPL750 (XL4)
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 39% of scored CVEs
SeverityCVSS
8.6High
Description NVD
A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas line.
Coverage 1 article · 1 outlet
- GPL Odorizers GPL750CISA · first in our coverage · official notice