CVE
CVE-2026-4436
GPL Odorizers · GPL Odorizers GPL750 (XL7 Prime); GPL Odorizers · GPL Odorizers GPL750 (XL7); +2 more
- First Reported
- Apr 24, 2026
- Latest Reported
- Apr 24, 2026
CVE Enrichment
- CVSS
- 8.6 HIGH
- EPSS
- 0.45%
- EPSS Percentile
- 39.10%
- CISA KEV
- Not listed
Description
A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas line.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- [email protected]
- Published
- 10-Apr-2026 03:16
- Last Modified
- 27-Oct-2026 04:10
- EPSS Date
- 2026-11-04
- CWE
- CWE-306
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:N /
S:C /
C:N /
I:H /
A:N
CNA Products / Version Status
- GPL Odorizers · GPL Odorizers GPL750 (XL7 Prime)
Source: CNA · [email protected]
Default status: unaffected
v18.4 ≤ version < v20.0 — affected (custom)
- GPL Odorizers · GPL Odorizers GPL750 (XL7)
Source: CNA · [email protected]
Default status: unaffected
v13.0 ≤ version < v20.0 — affected (custom)
- GPL Odorizers · GPL750 (XL4 Prime)
Source: CNA · [email protected]
Default status: unaffected
v4.0 ≤ version < v6.0 — affected (custom)
- GPL Odorizers · GPL750 (XL4)
Source: CNA · [email protected]
Default status: unaffected
v1.0 ≤ version < v6.0 — affected (custom)
References
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- CVE-2026-4436 — GPL Odorizers (High) Cyble Weekly Report Tracks 1,675 Vulnerabilities and 10 KEV Additions
CVE (11)
MITRE ATT&CK (4)
Vendors (7)
Products (9)
Industries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.