Phoenix Contact patched three PLCnext flaws, including CVE-2025-41771, which lets an attacker execute unauthorized SQL queries, plus a CVSS 9.8 RCE bug. Related Posts: Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs Roundcube Patches RCE and SSRF Flaws in 1.6.18 and 1.7.3 CVE-2026-15826: User Profile Builder Bug Under Active Attack, Grants Full Admin Takeover (CVSS 9.8) The post CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext appeared first on Daily CyberSe

Phoenix Contact CHARX vulnerabilities expose EV charging controllers to remote root access. 20 flaws are patched in firmware 1.9.1, update now. Related Posts: CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10 CVE-2026-66747: Zbtlink Router Backdoor ENDLESSDOORS Enables Unauthenticated Remote Code Execution as Root CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed The post Phoenix Contact CHARX Vulnerabilities Expose