Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-4436

GPL Odorizers GPL750 Missing Authentication for Critical Function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas line.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GPL Odorizers GPL750 (XL4)

Default version status: unaffected

  • v1.0 to < v6.0affected

GPL Odorizers GPL750 (XL4 Prime)

Default version status: unaffected

  • v4.0 to < v6.0affected

GPL Odorizers GPL Odorizers GPL750 (XL7)

Default version status: unaffected

  • v13.0 to < v20.0affected

GPL Odorizers GPL Odorizers GPL750 (XL7 Prime)

Default version status: unaffected

  • v18.4 to < v20.0affected

References