PT-2026-21251 · Plc · Plc

Published 2026-02-20 · Updated 2026-02-20 · CVE-2026-24790

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The programmable logic controller (PLC) of the device is susceptible to remote influence without adequate security measures or authentication. An attacker can manipulate the PLC’s behavior over the network, potentially gaining malicious control of industrial processes. A PLC is a specialized computer used to automate industrial processes, such as controlling machinery on factory assembly lines, amusement rides, or light fixtures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-24790

Affected Products

Plc

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-24790 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-04.json · Note
• https://twitter.com/TheHackerWire/status/2024904493524218117 · Twitter Post
• https://twitter.com/CVEnew/status/2024988801014366514 · Twitter Post
• https://welker.com/contact-us/welker-team · Note
• https://twitter.com/CveTodo/status/2024901543762255959 · Twitter Post
• https://twitter.com/TweetThreatNews/status/2024962332623884728 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-050-04 · Note