CVE-2026-3323 | VEGA Grieshaber VEGAPULS 6X Two-wire PROFINET/Modbus TCP/OPC UA Configuration Interface missing authentication (VDE-2026-016)

A vulnerability has been found in VEGA Grieshaber VEGAPULS 6X Two-wire PROFINET, Modbus TCP and OPC UA and classified as critical. This issue affects some unknown processing of the component Configuration Interface. The manipulation leads to missing authentication.

This vulnerability is uniquely identified as CVE-2026-3323. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to apply restrictive firewalling.