PLCnext Engineer
- Software type
- Other
- Total vulnerabilities (90 days)
- 3
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, PLCnext Engineer recorded 3 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of PLCnext Engineer and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-110935Path traversal in plug-in deploymentCVE-2026-110022Signed plug-in validation bypassCVE-2026-110021Missing GSDX SignatureValue verificationCVE-2023-46144PHOENIX CONTACT: PLCnext Control prone to download of code without integrity checkCVE-2023-46142PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-110935Path traversal in plug-in deployment | Exploitation statusNot exploited | FixYes | Published11/04/2026 | SeverityHigh |
CVE-2026-110022Signed plug-in validation bypass | Exploitation statusNot exploited | FixYes | Published11/04/2026 | SeverityHigh |
CVE-2026-110021Missing GSDX SignatureValue verification | Exploitation statusNot exploited | FixYes | Published11/04/2026 | SeverityMedium |
CVE-2023-46144PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check | Exploitation statusNot confirmed | FixYes | Published12/14/2023 | SeverityMedium |
CVE-2023-46142PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control | Exploitation statusNot confirmed | FixYes | Published12/14/2023 | SeverityHigh |
CVE-2020-12499PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability. | Exploitation statusNot confirmed | FixYes | Published07/21/2020 | SeverityHigh |
6 Results | Page 1 of 1