Beckhoff Automation
CVE-2026-18768: A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys because of exposed IOCTL function calls resulting in
CVE-2026-18768 Nov 11, 2026 Source: Vendor
A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-18768
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3
CVE-2026-18768
BR2026-0000-047016
unclaimed
Credited as Chi Siang Choo from 4rthur Security Team
CVE-2026-18768
BR2026-0000-047017
unclaimed
Credited as Julian Horoszkiewicz
CVE-2026-18768
BR2026-0000-047018
unclaimed
Credited as Patrick Saif