Vulnerability · Published Apr 17, 2026 · Assigned by icscert
CVE-2026-6284Horner Automation Cscape and XL4, XL7 PLC Weak password requirements
Critical 9.1
In plain English
A critical-severity security flaw in Cscape from Horner Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.4%top 60.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Horner Automation | Cscape | 10.0 |
| Horner Automation | XL7 PLC | 15.60 |
| Horner Automation | XL4 PLC | 16.32.0 |
Weakness: CWE-521 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N