Phoenix Contact

CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext Phoenix Contact PLCnext vulnerability letting an attacker execute unauthorized SQL queries via the controller web interface

Phoenix Contact PLCnext vulnerability letting an attacker execute unauthorized SQL queries via the controller web interface

CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext

Do Son August 14, 2026

TL;DR Phoenix Contact disclosed three vulnerabilities in PLCnext firmware on August 12, 2026. One flaw, CVE-2025-41771, lets...

Phoenix Contact CHARX Vulnerabilities Expose EV Charging Controllers

Phoenix Contact CHARX vulnerabilities affecting EV charging controller firmware

Phoenix Contact CHARX Vulnerabilities Expose EV Charging Controllers

Do Son August 6, 2026

TL;DR: Phoenix Contact CHARX vulnerabilities now number 20 across the SEC-3xxx EV charging controllers. Several rate critical,...

Critical Flaws in Phoenix Contact EV Charging Controllers Expose Infrastructure to Remote Code Execution and Unauthorized Access Phoenix Contact, Critical Vulnerabilities

Phoenix Contact, Critical Vulnerabilities

Critical Flaws in Phoenix Contact EV Charging Controllers Expose Infrastructure to Remote Code Execution and Unauthorized Access

Do Son July 9, 2025

In a coordinated disclosure with CERT@VDE, Phoenix Contact GmbH & Co. KG has issued an urgent advisory...

Critical Vulnerabilities Found in Phoenix Contact Charging Controllers Phoenix Contact Vulnerabilities

Phoenix Contact Vulnerabilities

Critical Vulnerabilities Found in Phoenix Contact Charging Controllers

Do Son March 14, 2024

Industrial automation leader Phoenix Contact has issued an urgent security alert regarding multiple critical vulnerabilities discovered within...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2021-23758CVSS 8.1
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2019-1068CVSS 8.8
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions,...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-3246CVSS 5.1
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-5287CVSS 7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2026-8452
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2022-0995CVSS 7.8
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2026-63520CVSS 8.1
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Admin intel📅 Updated: Aug 25, 2026
CVE-2026-77136CVSS 9.5
The extension passes the raw value of a form field configured as \"This field contains the name of...
Admin intel📅 Updated: Aug 25, 2026