ZDI-CAN-28242
HIGH 7.8
Upcoming
Mar 11, 2026
Bosch Rexroth
Bosch Rexroth, a major industrial automation and hydraulics company, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit but can result in complete compromise of confidentiality, integrity, and availability. The flaw does not require authentication, making it particularly concerning in environments where multiple users have system access. Security teams should monitor for patches between now and July 2026 and restrict local access to affected systems where possible until updates are available.
Advisory Details
Researcher
kimiya
Reported
March 11, 2026
Deadline
July 09, 2026
84d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H