Gpl750 Xl4 Prime

1 CVEs product

Monthly

CVE-2026-4436 HIGH CISA Act Now

Unauthenticated remote attackers can manipulate Modbus register inputs in GPL Odorizers GPL750 industrial control systems (XL4, XL4 Prime, XL7, XL7 Prime variants across versions 1.0-20.0), causing incorrect odorant injection volumes into natural gas distribution pipelines. Authentication bypass (CWE-306) via network-accessible Modbus interface permits direct register value tampering without credential validation, enabling safety-critical process manipulation. No public exploit identified at time of analysis.

Authentication Bypass Gpl750 Xl4 Gpl750 Xl4 Prime Gpl Odorizers Gpl750 Xl7 Gpl Odorizers Gpl750 Xl7 Prime
NVD GitHub
CVSS 3.1
8.6
EPSS
0.0%
CVE-2026-4436
EPSS 0% CVSS 8.6
HIGH Act Now

Unauthenticated remote attackers can manipulate Modbus register inputs in GPL Odorizers GPL750 industrial control systems (XL4, XL4 Prime, XL7, XL7 Prime variants across versions 1.0-20.0), causing incorrect odorant injection volumes into natural gas distribution pipelines. Authentication bypass (CWE-306) via network-accessible Modbus interface permits direct register value tampering without credential validation, enabling safety-critical process manipulation. No public exploit identified at time of analysis.

Authentication Bypass Gpl750 Xl4 Gpl750 Xl4 Prime +2
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy