CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-94293 — An unauthenticated remote attacker can modify Asset Administration Shell submode...

·Source: NIST NVD

Updated:

Executive Summary

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.

Analysis

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints. CVSS Score: 9.8. Published: 2026-10-06T07:17:00.193.

Indicators of Compromise (1)

CVE (1)
CVE-2026-94293
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 6, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

French regulator targets crowdfunding platforms

France's financial watchdog, the Autorité des Marchés Financiers (AMF), has called on crowdfunding platforms to strengthen their practices in order to better protect investors.

Finextra
HIGHVulnerability

More RMM Tools In the Wild, (Tue, Oct 6th)

It seems that a trend started… I continue my journey discovering more RMM ("Remote Management & Monitoring") tools abused by threat actors! A few days ago, I wrote a diary[1] about ScreenConnect used in the wild. Today, I found another one.

SANS ISC
MEDIUMVulnerability

Police Urge Passkey Use After Surge in Cybercrime Profits

Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually

Infosecurity Magazine