{"vulnerability": "cve-2026-94293", "sightings": [{"uuid": "43e7fca4-517c-4564-ba4c-7d6fc22a861d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117392582452388550", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-108Murrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS DataCVE-2026-94293\nThe aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by Murrelektronik GmbH on GitHub for\u2026\nHTML: https://certvde.com/en/advisories/vde-2026-108/CSAF JSON: https://murrelektronik.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-108.json\n#OT #Advisory", "creation_timestamp": "2026-10-06T06:37:38.898288Z"}, {"uuid": "bcb2cde6-ac07-4095-b5f6-07ef4dab8b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mx6t27q6yar2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-108\nMurrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS Data\nCVE-2026-94293\n\nThe aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by [\u2026]", "creation_timestamp": "2026-10-06T06:39:27.254096Z"}, {"uuid": "96349b13-9ab6-4d30-9728-174fe3245d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ymage22fl55s", "content": "CVE-2026-94293 - Missing authentication for critical function in the aas-edge-client REST API\nCVE ID : CVE-2026-94293\n \n Published : Oct. 6, 2026, 6:38 a.m. | 35\u00a0minutes ago\n \n Description : An unauthenticated remote attacker can modify Asset Administration Shell submodel data...", "creation_timestamp": "2026-10-06T07:50:14.372761Z"}, {"uuid": "70706a23-06fb-403e-9620-2ccdba96ef0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx6xyaz23c2z", "content": "\ud83d\udea8 CVE-2026-94293 \u2014 CVSS 9.3 CRITICAL\n\nAn unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94293\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T08:07:13.846242Z"}, {"uuid": "2e8b0013-cee4-4f0d-ac23-52df6b92f02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7apj5vou23", "content": "Murrelektronik won't fix AAS edge client vulnerability CVE-2026-94293 (CVSS 9.8), which allows unauthenticated data changes. Remove it now.\n\n#Murrelektronik #AAS #CVE202694293 #ICS #OTSecurity #Industry40 #MissingAuthentication #Vulnerability", "creation_timestamp": "2026-10-06T10:43:24.568763Z"}]}