Skip to content

Known vulnerabilities in Phoenix Contact PLCnext Engineer

Is your version affected?

CVE Summary Score Published
CVE-2026-110935 Path traversal in plug-in deployment 8.6 High Nov 4, 2026
CVE-2026-110022 Signed plug-in validation bypass 8.6 High Nov 4, 2026
CVE-2026-110021 Missing GSDX SignatureValue verification 6.9 Medium Nov 4, 2026
CVE-2023-46144 A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low… 6.5 Medium Dec 14, 2023
CVE-2023-46142 A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with… 8.8 High Dec 14, 2023
CVE-2020-12499 In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on… 8.2 High Jul 21, 2020

Other Phoenix Contact products