ZDI-CAN-28242 HIGH 7.8 Upcoming Mar 11, 2026

Bosch Rexroth

Bosch Rexroth, a major industrial automation and hydraulics company, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit but can result in complete compromise of confidentiality, integrity, and availability. The flaw does not require authentication, making it particularly concerning in environments where multiple users have system access. Security teams should monitor for patches between now and July 2026 and restrict local access to affected systems where possible until updates are available.

Advisory Details
Researcher kimiya
Reported March 11, 2026
Deadline July 09, 2026 84d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy