CVE-2025-11694None▾ SunlitA security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web inte…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in a minor fault.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-118776Low· 3.7Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
CVE-2026-118782High· 7.5Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
CVE-2026-119186Medium· 5.9Forge: AES-GCM authentication bypass via unvalidated tagLength option
CVE-2026-90720Medium· 6.7Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…
CVE-2026-116608Medium· 5.4DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check
CVE-2026-65625Medium· 5.9Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose