Phoenix Contact warns of multiple flaws in PLCnext Engineer before version 2026.6
VULNERABILITYCanadian Centre for Cyber Securityredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Canadian Centre for Cyber Security advisory AV26-1121 (4 November 2026) covers Phoenix Contact PLCnext Engineer versions prior to 2026.6. The vulnerabilities are a GSDX SignatureValue verification flaw, a signed plug-in validation bypass and a path traversal issue; no CVE identifiers or CVSS scores are given in the article. Defenders should upgrade to 2026.6 or later and check the vendor advisory for details.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Update PLCnext Engineer to version 2026.6 or later.
- Review the Phoenix Contact advisory links for full details of the affected components.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Canadian Centre for Cyber Security
Who and what is in it
Companies