CVE-2026-54800
MediumCVSS 4.8Summary
A vulnerability in CPCI85 Central Processing/Communication and SICORE Base systems (versions before V26.20/V26.20.0) is caused by a default configuration that disables all OPC UA security mechanisms. This allows an attacker to gain unauthorized access and control over critical system functions.
Risk Assessment
The organization faces the risk of industrial system takeover, potentially leading to production disruptions, data theft, or sabotage.
Recommendation
Immediately update systems to version V26.20 (CPCI85) or V26.20.0 (SICORE Base) and enable OPC UA security mechanisms such as authentication and encryption.
Other vulnerabilities in CPCI85 Central Processing/Communication, SICORE Base system
Original NVD description (English source)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized access and control over critical system functions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS