CVE-2026-60135

Received Received - Intake

Unauthorized Data Modification in Industrial Control System

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: ICS-CERT

Description

An attacker can modify data that should be restricted to read‑only access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-24

Last Modified

2026-07-24

Generated

2026-07-25

AI Q&A

2026-07-25

EPSS Evaluated

N/A

NVD

CVE-2026-60135

EUVD

EUVD-2026-48747

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-286	The product does not properly manage a user within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability allows an attacker to modify data that should only be accessible in read-only mode. This means unauthorized changes can be made to restricted information without proper permissions.

Impact Analysis

An attacker could alter critical data, leading to incorrect decisions, data corruption, or unauthorized actions. This could affect system integrity and trust in the data.

Compliance Impact

This vulnerability could violate compliance requirements that mandate data integrity and protection, such as GDPR's accuracy principle or HIPAA's integrity safeguards, potentially leading to legal and regulatory penalties.

Mitigation Strategies

Implement strict access controls to prevent unauthorized modifications. Review and restrict user permissions to read-only where possible. Monitor system logs for unusual write attempts or data changes.

Hi! I’m here to help you understand CVE-2026-60135. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70