Advisories

For CVSS 2.0, 3.0 and 3.2
VDE-2026-046
June 24, 2026, 12:00 PM

VEGA: Missing Authentication for critical function in VEGAPULS two- and four-wire products

Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed …
CVE-2026-3323
VDE-2026-047
June 22, 2026, 12:00 PM

VEGA: Missing Authentication for critical function in VEGAPULS Air products

Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed …
CVE-2026-3323
VDE-2026-048
June 24, 2026, 12:00 PM

VEGA: Missing Authentication for critical function in VEGAPULS Bluetooth products

Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed …
CVE-2026-3323
VDE-2026-016
June 24, 2026, 12:00 PM

VEGA: Unsecured Configuration Interface Allows Unauthorized Access Leading to Privilege Escalation

Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed …
CVE-2026-3323