PT-2026-31719 · Gpl750 · Gpl750

Published 2026-04-09 · Updated 2026-04-21 · CVE-2026-4436

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions versions not specified

Description A remote attacker with low privileges can manipulate Modbus register values used in odorant injection logic, potentially causing over or under-injection of odorant into a gas line. Attackers have exploited this issue to send unauthorized Modbus commands to GPL750 odorizer devices, manipulating odorant injection levels in gas pipelines. The lack of authentication allows for potential lateral movement within industrial networks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-4436

Affected Products

Gpl750

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-4436 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-099-02.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-099-02 · Note
• https://lincenergysystems-my.sharepoint.com/:f:/p/h_baer/IgDYaHIhXpyLQJvnKPd6b80TAUgV7Lp8qmVYBFUb0lmr7ak?e=JLeADm · Note
• https://twitter.com/SecurityAr58409/status/2046396384387932394 · Twitter Post
• https://twitter.com/CveFindCom/status/2042342699865395453 · Twitter Post
• https://twitter.com/aviatrixtrc/status/2042280604218102181 · Twitter Post
• https://twitter.com/CVEnew/status/2042340041398137102 · Twitter Post
• https://twitter.com/giuseppe_1337/status/2045660070235484217 · Twitter Post