theinfosecnews

CVE-2026-4436

Published April 10, 2026 · Updated April 10, 2026

8.6CVSS
high

What This Means

CVE-2026-4436 is a high-severity vulnerability that allows low-privileged remote attackers to manipulate Modbus packets, impacting the injection of odorant in gas lines. By altering register values, an attacker can inject either excessive or insufficient odorant, posing risks to safety and operational integrity. It is recommended to implement network segmentation, restrict access to Modbus services, and monitor for unusual Modbus traffic to mitigate this risk.

Official Description+

A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas line.

Recommended Actions

  1. Check if your systems use any of the affected products listed above.
  2. Apply vendor patches immediately if available.
  3. Monitor vendor advisories for updates and additional mitigations.
  4. Review logs for indicators of compromise related to CVE-2026-4436.

Related Coverage