CVE-2026-94293

An unauthenticated remote attacker can exploit this vulnerability to modify Asset Administration Shell submodel data through malicious PATCH requests, while also gaining access to all data exposed by the GET endpoints. The critical severity of this issue (CVSS 9.8) necessitates immediate attention from organizations utilizing affected products, particularly those managing sensitive asset data. Security teams should prioritize patching and implementing access controls to mitigate potential data breaches and unauthorized modifications.