CyberRota Analysis
AI-GeneratedA vulnerability in ICS versions prior to 25.1.3.0 allows remote unauthenticated attackers to bypass authentication through spoofing, enabling them to execute arbitrary commands on the affected systems. This poses a significant risk to the integrity and security of industrial control environments. Organizations using ICS versions 25.1.3.0 and later should prioritize immediate updates, while those on version 22.7R2.14 or earlier are not affected.
CVE
CVE-2026-104935
Severity
HIGH
CVSS
8.6
EPSS
25.98%
Original NVD Description
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
Related CVEs
Other vulnerabilities affecting the same vendor(s)