Skip to content
OpenAdvisories
High · 8.6 CVE-2026-4436 EUVD-2026-21066GHSA-frgm-v97w-x7w6

GPL Odorizers GPL750 Missing Authentication for Critical Function

Published Apr 9, 2026 · Updated Apr 14, 2026 · Assigned by icscert

Description

A low-privileged remote attacker can send Modbus packets to manipulate
register values that are inputs to the odorant injection logic such that
too much or too little odorant is injected into a gas line.

Affected products

VendorProductAffectedFixed
GPL Odorizers GPL750 (XL4) v1.0 – < v6.0 v6.0
GPL Odorizers GPL750 (XL4 Prime) v4.0 – < v6.0 v6.0
GPL Odorizers GPL Odorizers GPL750 (XL7) v13.0 – < v20.0 v20.0
GPL Odorizers GPL Odorizers GPL750 (XL7 Prime) v18.4 – < v20.0 v20.0

Advisories 1

References