CVE-2026-3323

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.

Score

CVSS 3.1 7.5 High

Status

Analyzed - info@cert.vde.com

Published

2026-04-28

Last modified

2026-10-26

Weaknesses

CWE-306

Affected products

• Vegapuls6x Pn Firmware (Vega)
• Vegapuls 6x Firmware (Vega)

References

• https://certvde.com/en/advisories/VDE-2026-016
• https://vega.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-016.json