Critical severity · published Sep 11, 2026
CVE-2026-3869
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an…
9.2
CVSS
0.5%
EPSS
No
On KEV
Description
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Modicon M580 · Schneider Electric
All versions with an application level below 4.00 · source: vendor
MM
Modicon M580 Safety · Schneider Electric
All versions with an application level below 4.20 · source: vendor