AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2017-6026

CRITICAL · CVSS 9.1 EPSS 31.82% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-06-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References
exploit-db.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-6026
Severity
CRITICAL
CVSS
9.1
EPSS
31.82%

Original Filing — NVD Description

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised.