CVE-2026-18767 | Beckhoff Automation TcRouter.sys/TwinCAT.XAR.Base.KM prior 3.1.0.2365/3.18.1 IOCTL TcRouter.sys privileges management

November 11, 2026 Yanac

A vulnerability labeled as very critical has been found in Beckhoff Automation TcRouter.sys and TwinCAT.XAR.Base.KM. Impacted is an unknown function of the file TcRouter.sys of the component IOCTL Handler. Such manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-18767. An attack has to be approached locally. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More