CVE-2026-110021

PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML SignatureValue over canonicalized SignedInfo. An unauthenticated local attacker can modify signed GSDML content, update its manifest digest, retain the public certificate data, and leave an inval...

CVE-2026-110021 Missing GSDX SignatureValue verification

PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML SignatureValue over canonicalized SignedInfo. An unauthenticated local attacker can modify signed GSDML content, update its manifest digest, retain the public certificate data, and leave an inval...

CVE-2026-110021

The PLCnext Engineer software (versions prior to 2026.6 ) is vulnerable to a cryptographic signature verification flaw. The application checks GSDX manifest reference digests but fails to cryptographically verify the XML SignatureValue over the canonicalized SignedInfo . An unauthenticated local ...

EUVD-2026-116802

PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML SignatureValue over canonicalized SignedInfo. An unauthenticated local attacker can modify signed GSDML content, update its manifest digest, retain the public certificate data, and leave an inval...