ZDI-CAN-28831 HIGH 7.8 Upcoming Mar 02, 2026

AzeoTech

AzeoTech is a software company known for industrial automation and SCADA/HMI (human-machine interface) platforms. This is a high-severity local vulnerability with a CVSS score of 7.8 that requires no authentication or user interaction beyond opening a malicious file, and it delivers complete compromise of confidentiality, integrity, and availability on the affected system. Security teams should monitor for exploitation attempts targeting AzeoTech deployments in industrial environments and critical infrastructure, as the vendor deadline for fixes extends to June 2026.

Advisory Details
Researcher Rocco Calvi (@TecR0c) with TecSecurity
Reported March 02, 2026
Deadline June 30, 2026 75d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy