PHOENIX CONTACT PLCnext Engineer

• CVE-2026-110935 High 8.4 Path traversal in plug-in deployment 0.2%
• CVE-2026-110022 High 8.4 Signed plug-in validation bypass 0.1%
• CVE-2026-110021 Medium 6.2 Missing GSDX SignatureValue verification <0.1%
• CVE-2023-46144 Medium 6.5 PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check 0.3%
• CVE-2023-46142 High 8.8 PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control 0.7%
• CVE-2020-12499 High 8.2 PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability. 0.4%