VYPR

PLCnext Engineer

by PLCnext Engineer

CVEs (1)

  • CVE-2026-110021MedNov 4, 2026
    risk 0.40cvss 6.2epss —

    PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over canonicalized `SignedInfo`. An unauthenticated local attacker can modify signed GSDML content, update its manifest digest, retain the public certificate…