Phoenixcontact Vplcnext Control 500 Firmware
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Phoenixcontact Vplcnext Control 500 Firmware.
By the Year
In 2026 there have been 3 vulnerabilities in Phoenixcontact Vplcnext Control 500 Firmware with an average score of 7.8 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 3 | 7.77 |
It may take a day or so for new Vplcnext Control 500 Firmware vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Phoenixcontact Vplcnext Control 500 Firmware Security Vulnerabilities
SQLi in controller web interface affects SQLite notification DB
CVE-2025-41771
5.3 - Medium
- August 12, 2026
An authenticated attacker with low privileges can access an endpoint in the controllers web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the systems notification functionality.
SQL Injection
Unauth DoS via PLCnext Engineer Comm Interface
CVE-2025-41770
8.7 - High
- August 12, 2026
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted.
Allocation of Resources Without Limits or Throttling
PROFINET Buffer Overflow: Remote RCE Enables Device Reboot
CVE-2025-41769
9.3 - Critical
- August 12, 2026
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.
Classic Buffer Overflow
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Phoenixcontact Vplcnext Control 500 Firmware or by Phoenixcontact? Click the Watch button to subscribe.
