Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Phoenix Contact AXC F 1152, AXC F 1252 and 13 more products 2026.0.3 Clear all filters
TI-2025-27731 CVE-2025-41771 · GHSA-vr3r-mcqv-4cmg

SQL injection in Phoenix Contact AXC F 1152

Priority LOW 24

An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00273 Published 2026-08-12 Fixed in 2026.0.3 CWE-89
TI-2025-27730 CVE-2025-41770 · GHSA-89p8-vj9j-4m5c

Unauthenticated denial of service in Phoenix Contact AXC F 1152

Priority MEDIUM 44

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00549 Published 2026-08-12 Fixed in 2026.0.3 CWE-770
TI-2025-27729 CVE-2025-41769 · GHSA-9v55-xwh5-8wv7

Unauthenticated Buffer Overflow in PROFINET Service

Priority MEDIUM 50

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00838 Published 2026-08-12 Fixed in 2026.0.3 CWE-120