CVE-2026-6284 - Vulnerability Analysis

Overview

A PLC contains a broken authentication vulnerability caused by limited password complexity and lack of input limiters, letting attackers with network access brute force passwords to gain unauthorized access.

Severity & Score

Impact

Attackers can gain unauthorized access to systems and services by brute forcing passwords.

Mitigation

Implement stronger password complexity and input limiters or update to the latest secure version.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-106-02.json
• https://hornerautomation.com/cscape-software-free/cscape-software/
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-106-02

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner