What’s Vulnerable › Vulnerabilities

CVE-2025-41670: Untrusted Search Path

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-27 · updated 2026-10-14
• Weakness: CWE-427

Description

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the filesystem. The affected service processes data from locations that are not sufficiently protected against modification by low-privileged users. As the service runs with elevated privileges, successful exploitation may result in a local privilege escalation.

Affected products

• PHOENIX CONTACT AXC F 1152: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact AXC F 1252: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact AXC F 2000 EA: before 2026.0.3 — fixed in 2026.0.3
• PHOENIX CONTACT AXC F 2152: before 2026.0.3 — fixed in 2026.0.3
• PHOENIX CONTACT AXC F 3152: before 2026.0.3 — fixed in 2026.0.3
• PHOENIX CONTACT BPC 9102S: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact EPC 1522: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact RFC 4072R: before 2026.0.3 — fixed in 2026.0.3
• PHOENIX CONTACT RFC 4072S: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VL3 UPC 2440 EDGE: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VPLCNEXT CONTROL 1000: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VPLCNEXT CONTROL 2000: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VPLCNEXT CONTROL 3000: before 2026.0.3 — fixed in 2026.0.3
• Phoenix Contact VPLCNEXT CONTROL 500: before 2026.0.3 — fixed in 2026.0.3

How to fix

Upgrade to a fixed version: PHOENIX CONTACT AXC F 1152 2026.0.3; Phoenix Contact AXC F 1252 2026.0.3; Phoenix Contact AXC F 2000 EA 2026.0.3; PHOENIX CONTACT AXC F 2152 2026.0.3; PHOENIX CONTACT AXC F 3152 2026.0.3; PHOENIX CONTACT BPC 9102S 2026.0.3; Phoenix Contact EPC 1522 2026.0.3; Phoenix Contact RFC 4072R 2026.0.3; PHOENIX CONTACT RFC 4072S 2026.0.3; Phoenix Contact VL3 UPC 2440 EDGE 2026.0.3; Phoenix Contact VPLCNEXT CONTROL 1000 2026.0.3; Phoenix Contact VPLCNEXT CONTROL 2000 2026.0.3. Check the vendor advisory for mitigations.

References

• https://www.certvde.com/en/advisories/VDE-2026-050/

Get alerted when CVE-2025-41670 or the next vulnerability affects your stack