ZDI-CAN-28113 HIGH 7.8 Overdue Dec 09, 2025

Bosch Rexroth

Bosch Rexroth is a major industrial automation and hydraulics manufacturer whose products are widely used in manufacturing and control systems. This high-severity vulnerability (CVSS 7.8) requires local access to exploit and user interaction, but requires no authentication and can result in complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patches following the April 2026 vendor deadline and prioritize updating Bosch Rexroth systems in environments where local access controls may be weak.

Advisory Details
Researcher Discovered by: kimiya
Reported December 09, 2025
Deadline April 08, 2026 9d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy