Advisories · Technology

Phoenix Contact PLCnext Engineer.

Every CVE that names Phoenix Contact PLCnext Engineer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110935 CVE record

CVSS 8.6 High

Path traversal in plug-in deployment
- Phoenix Contact PLCnext Engineer
- Path traversal
Not analysed yet 4 Nov 2026
CVE-2026-110022 CVE record

CVSS 8.6 High

Signed plug-in validation bypass
- Phoenix Contact PLCnext Engineer
- CWE-494
Not analysed yet 4 Nov 2026
CVE-2026-110021 CVE record

CVSS 6.9 Medium

Missing GSDX SignatureValue verification
- Phoenix Contact PLCnext Engineer
- Weak cryptography or TLS
Not analysed yet 4 Nov 2026
CVE-2023-46144 CVE record

CVSS 6.5 Medium

PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
- PHOENIX CONTACT AXC F 1152
- PHOENIX CONTACT AXC F 2152
- CWE-494
Not analysed yet 14 Dec 2023
CVE-2023-46142 CVE record

CVSS 8.8 High

PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control
- PHOENIX CONTACT AXC F 1152
- PHOENIX CONTACT AXC F 2152
- Broken access control
Not analysed yet 14 Dec 2023
CVE-2020-12499 CVE record

CVSS 8.2 High

PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.
- PHOENIX CONTACT PLCnext Engineer
- Path traversal
Not analysed yet 21 Jul 2020