Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Phoenix Contact AXC F 1152, AXC F 1252 and 12 more products 2026.0.3 Clear all filters
TI-2025-27634 CVE-2025-41669 · GHSA-m3wg-2ch3-59m2

Insufficient verification of data authenticity in Phoenix Contact AXC F 1152

Priority LOW 39

The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing any data verification mechanism, leading to the capabi…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00218 Published 2026-05-27 Fixed in 2026.0.3 CWE-347
TI-2025-27635 CVE-2025-41670 · GHSA-7grg-5m65-97hj

Untrusted search path in Phoenix Contact AXC F 1152

Priority LOW 39

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0019 Published 2026-05-27 Fixed in 2026.0.3 CWE-427