PT-2026-35708 · Vega Grieshaber+1 · Vegapuls 6X Two-Wire Profinet+1

Published 2026-04-28 · Updated 2026-05-11 · CVE-2026-3323

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An unsecured configuration interface allows unauthenticated remote attackers to access sensitive information, such as hashed credentials and access codes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-3323

Affected Products

Vegapuls 6X Two-Wire Profinet

Vegapuls 6X Firmware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-3323 · Security Note
• https://certvde.com/en/advisories/VDE-2026-016 · Vendor Advisory
• https://vega.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-016.json · Vendor Advisory
• https://t.me/cveNotify/163048 · Telegram Post
• https://t.me/cveNotify/161233 · Telegram Post
• https://twitter.com/CVEnew/status/2049227571565375906 · Twitter Post
• https://t.me/CVEtracker/52076 · Telegram Post