CRITICAL 9.3 NVD

CVE-2026-94293

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.

References

Published: 2026-10-06 · Source: NVD · Feed updated: 2026-10-06
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-10-06 via NVD.

Risk Timeline

CVE Disclosed2026-10-06 · -1 days ago

Remediation Resources

Analysis & PoC
www.certvde.com/en/advisories/VDE-2026-108/
vulnfeed aggregates 11356 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.