Phoenix Contact warns of multiple flaws in PLCnext Engineer before version 2026.6
VULNERABILITYCanadian Centre for Cyber Securityredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
An advisory from the Canadian Centre for Cyber Security (AV26-1121, dated 4 November 2026) reports vulnerabilities in Phoenix Contact's PLCnext Engineer programming software prior to 2026.6. The issues cover GSDX SignatureValue verification, signed plug-in validation bypass and path traversal. Administrators should review the vendor advisory links and apply the update.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Update PLCnext Engineer to version 2026.6 or later.
- Review the Phoenix Contact advisory links for full details of the affected components.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Canadian Centre for Cyber Security
Who and what is in it
Companies