Vulnerability in SOEM Software by RT-Labs Exposes Master System to Crashes
CVE-2026-82946

6.5MEDIUM

Key Information:

Vendor

Rt-labs Ab

Status
Soem
Vendor
CVE Published:
26 October 2026

What is CVE-2026-82946?

SOEM versions up to 2.0.0 contain a vulnerability that can be exploited by a malicious device to crash the master system. This occurs due to improper handling of error responses, where an internal pointer is cleared but continues to be processed. If a subsequent message arrives before a timeout occurs, the software attempts to use the cleared pointer, leading to a system crash. Attackers can exploit this by sending a carefully crafted sequence of two messages.

Affected Version(s)

SOEM 0 < 2.0.1

References

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-26092...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

alosafuzz
.