CVE-2026-3869

State: Published
Severity: 9.2 Critical
Published: Sep 11, 2026
Updated: Sep 11, 2026
Reserved: Mar 10, 2026

Description

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.

Scores

CVSS	Score	Vector	Source
4.0	9.2 Critical	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	schneider

Weaknesses

CWE-303 Incorrect implementation of authentication algorithm

Affected Products

Product	Versions
Modicon M580Schneider Electric	All versions with an application level below 4.00Affected
Modicon M580 SafetySchneider Electric	All versions with an application level below 4.20Affected

References

https://download.se.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.