Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-18769

Insufficient IOCTL access control allows local relocation of arbitrary physical memory

A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Beckhoff
Products
Tcrouter.sys Twincat.xar.base.km
CVE-2026-18768

Insufficient IOCTL access control allows local access to arbitrary physical memory

A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Beckhoff
Products
Tcrouter.sys Twincat.xar.base.km
CVE-2026-18767

Insufficient IOCTL access control allows local access to I/O ports

A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Beckhoff
Products
Tcrouter.sys Twincat.xar.base.km