HIGH 8.6 NVD

CVE-2026-102250

CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user beg

CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-286-02&p_enDocType=Secur

Published: 2026-10-13 · Source: NVD · Feed updated: 2026-10-13

This high severity vulnerability with a CVSS score of 8.6 was published on 2026-10-13 via NVD.

vulnfeed aggregates 13242 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.