Skip to content
Threat Feed
Subscribe

Tag

Modbus

3 briefs RSS
critical advisory

Unauthenticated Remote Access to Phoenix Contact CHARX SEC MQTT Broker

A critical vulnerability (CVE-2026-44090) in Phoenix Contact CHARX SEC controllers allows unauthenticated remote attackers to gain full device control by bypassing authentication on the MQTT broker.

CHARX SEC-3150 +7 industrial-control-systems mqtt cve-2026-44091 ics cve injection authentication-bypass cve-2026-44100 +14
2r 5t 12c
medium advisory

CODESYS Modbus Vulnerability Enables Denial of Service

A remote, anonymous attacker can exploit a vulnerability in CODESYS Modbus to perform a denial of service attack.

CODESYS Modbus dos modbus codesys
2r 1t
high advisory

CVE-2026-4436: Modbus Odorant Injection Manipulation

A low-privileged remote attacker can exploit CVE-2026-4436 by sending Modbus packets to manipulate register values controlling odorant injection in gas lines, potentially leading to hazardous conditions.

cve modbus industrial-control-system odorant-injection
2r 2t 1c