CVE-2026-110935 | Phoenix Contact PLCnext Engineer up to 2026.5 PFI Plugin path traversal

A vulnerability categorized as very critical has been discovered in Phoenix Contact PLCnext Engineer up to 2026.5. This affects an unknown part of the component PFI Plugin. Executing a manipulation can lead to path traversal.

This vulnerability is handled as CVE-2026-110935. It is possible to launch the attack on the local host. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More