Critical severityNVD Advisory· Published Sep 11, 2026· Updated Sep 18, 2026
CVE-2026-3869
CVE-2026-3869
Description
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.
Patches
Vulnerability mechanics
References
1News mentions
1- ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical FlawsSecurityWeek · Sep 9, 2026