CVE-2026-3323 VEGA: Privilege escalation through unsecured configuration interface in VEGAPULS devices
Unauthenticated attackers can access sensitive configuration data and hashed credentials via an unsecured interface on VEGA level transmitters.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-3323?
CVE-2026-3323 is a high-severity missing authorization vulnerability in VEGAPULS 6X Two-wire PROFINET, Modbus TCP, OPC UA (Ethernet-APL), published on 28 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.
Weakness: CWE-306
Which versions are affected by CVE-2026-3323?
It affects 1 product.
Products include Vega Vegapuls 6x Firmware.
How do I fix CVE-2026-3323?
No fix has been published for CVE-2026-3323 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-3323 being exploited?
There is no known exploitation of CVE-2026-3323 in the wild and no public exploit code.
Sources
Also known as GHSA-rjqm-m642-mm46.