[Control Systems] Phoenix Contact security advisory (AV26-1121)

<article data-history-node-id="8465" about="/en/alerts-advisories/control-systems-phoenix-contact-security-advisory-av26-1121" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout--onecol"> <div class="layout__region layout__region--content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix"> </div> <div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix"> <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-1121<br /><strong>Date: </strong>November 4, 2026</p> <p>As of November 4, 2026, Phoenix Contact is affected by vulnerabilities in the following product:</p> <ul><li>PLCnext Engineer <ul><li>Prior to 2026.6</li> </ul></li> </ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p> <ul class="list-unstyled"><li><a href="https://certvde.com/en/advisories/VDE-2026-121/">Phoenix Contact GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software</a></li> <li><a href="https://www.certvde.com/en/advisories/">Phoenix Contact Advisories</a></li> </ul></div> </div> </div> </div> </div> </article>