CVE-2026-24790

HIGH

Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller - Unauthenticated Remote PLC Manipulation

Title source: llm

The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication.

Core 3

Core References

Various Sources

Various Sources

Third Party Advisory, US Government Resource

CVSS v3 8.2

EPSS 0.0045

EPSS Percentile 35.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-306

Status published

Products (1)

Welker/OdorEyes EcoSystem Pulse Bypass System with XL4 Controller All versions

Published Feb 20, 2026

Tracked Since Feb 21, 2026