VulnSocial

CVE-2026-11841General

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-552

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-07-28); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-07-28: 1Mentions · 2026-08-03: 1Mentions · 2026-08-04: 1Patch / Workaround · 2026-08-03: 1Technical Details · 2026-07-28: 1Technical Details · 2026-08-03: 107-2808-0308-04
Signal classification2 categories
General
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-281
General1
2026-08-031
Patch1
2026-08-041
General1
Full discourse3 posts
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    CVE-2026-11841 lets an unauthenticated attacker reach internal files on SICK InspectorP6xx devices, risking device compromise. CVSS 9.4. Update to 5.4.0. #SICK #InspectorP6xx #CVE202611841 #OTSecurity #ICS #CyberSecurity http://securityonline.info/sick-inspectorp6xx-cve-2026-11841/

    Post summary

    CVE-2026-11841 is a high‑severity flaw in SICK InspectorP6xx devices that allows unauthenticated access to internal files; a patch (firmware 5.4.0) has been released to address the issue and no active exploitation is reported.

    00010440
    12.6K followersView on X
  • Mahmoud Jadaan@mjadaaan
    General

    SICK InspectorP6xx Flaw CVE-2026-11841 Could Lead to Full Device Compromise https://securityonline.info/sick-inspectorp6xx-cve-2026-11841/

    Post summary

    The snippet announces CVE‑2026‑11841 as a potential full device compromise for SICK InspectorP6xx, but provides no further technical, exploit, or mitigation details.

    0000044
    42 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-11841 Unauthenticated Filesystem Read and Write Access in AppEngine HTTP File Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11841

    Post summary

    The text only provides a CVE identifier with a short description and a reference link, lacking detailed technical or exploit information.

    0000066
    4.1K followersView on X

Explore more

Back to dashboard