Skip to content
OpenAdvisories
Critical ICSA-26-106-02 1 CVE

Horner Automation Cscape and XL4, XL7 PLC

Published Apr 16, 2026 · Updated Apr 16, 2026

Vendor: Horner Automation Product: Cscape Product: XL4 PLC Product: XL7 PLC

Summary

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to systems and services.

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-6284

    Horner Automation Cscape and XL4, XL7 PLC Weak password requirements

    An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible.

    Horner Automation Cscape XL7 PLC XL4 PLC

Revision history

  1. #1

    Initial Publication

References