[Control Systems] Phoenix Contact security advisory (AV26-811)
Serial number: AV26-811 Date: August 12, 2026 As of August 12, 2026, Phoenix Contact is affected by vulnerabilities in the following products: AXC F 1152 Prior to 2026.0.3 AXC F 1252 Prior to 2026.0.3 AXC F 2000 EA Prior to 2026.0.3 AXC F 2152 Prior to 2026.0.3 AXC F 3152 Prior to 2026.0.3 BPC 9102S Prior to 2026.0.3 BPC 9202S Prior to 2026.0.3 Catan C1 Prior to 2026.0.3 EPC 1502 Prior to 2026.0.3 EPC 1522 Prior to 2026.0.3 RFC 4072R Prior to 2026.0.3 RFC 4072S Prior to 2026.0.3 VL3 UPC 2440 EDGE Prior to 2026.0.3 VPLCNEXT CONTROL 1000 Prior to 2026.0.3 VPLCNEXT CONTROL 2000 Prior to 2026.0.3 VPLCNEXT CONTROL 3000 Prior to 2026.0.3 VPLCNEXT CONTROL 500 Prior to 2026.0.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware Phoenix Contact Advisories
CSIRTS triage
- What
- Improper input validation vulnerabilities in PLCnext firmware affect multiple control system products.
- Who is affected
- Deployments of Phoenix Contact AXC F, BPC, EPC, RFC, VL3 UPC, and VPLCNEXT CONTROL product lines running firmware versions prior to 2026.0.3.
- Urgency
- Unknown; control system impact suggests elevated risk but severity metrics are not provided.
- Action
- Review Phoenix Contact security advisory and upgrade affected products to firmware version 2026.0.3 or later.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://cyber.gc.ca/en/alerts-advisories/control-systems-phoenix-contact-security-advisory-av26-811
More from Canadian Centre for Cyber Security
- unknownIvanti security advisory (AV26-897)2026-09-08
- unknownMicrosoft security advisory – September 2026 monthly rollup (AV26-896) – Update 12026-09-08
- unknownAdobe security advisory (AV26-888) – Update 12026-09-08
- unknownN-able security advisory (AV26-885) – Update 12026-09-08
- unknownCommvault security advisory (AV26-895)2026-09-08