Status: UPDATED | Advisory ID: CVE-2026-78319
| CVE | CVE-2026-78319 |
| CVSS Score / Version | 9.3 (Critical) / CVSS v4.0 |
| Updated | 2026-09-03 |
| Affected products | Sauter modu680-AS, Sauter modu660-AS, Sauter modu612-LC, Sauter ecos504, and Sauter ecos505 |
| Classified as | CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition) |
| Exploitation prediction (EPSS) | 0.61% probability of exploitation in the next 30 days (47% percentile) -- FIRST.org's EPSS model. |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Sauter | modu680-AS | ||
| Sauter | modu660-AS | ||
| Sauter | modu612-LC | ||
| Sauter | ecos504 | ||
| Sauter | ecos505 |
| Subsystems | General OT |
| Sectors | Multiple |
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition.
An unauthenticated remote attacker could exploit this race condition to bypass intended security controls.
This may result in the execution of unauthorized code. (NVD)
Monitor Sauter's web page for any future patch releases.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-78319 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-78319 |