Live › vulnerability › CVE-2026-82946
Go to dashboardSOEM, an open-source EtherCAT master library, clears an internal pointer when it receives an error response but keeps processing. If a second message arrives before timeout, it dereferences the cleared pointer and crashes. An attacker controlling a device on the bus can crash the master with two messages.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 09:29 UTC. All times on this page are UTC.
Systems running SOEM 2.0.0 or earlier as an EtherCAT master, where a device on the fieldbus can send responses. The sources do not describe a default configuration that changes exposure. Teams not using SOEM, or running it on a bus with only trusted devices, face lower risk.
No product ranges from the sources yet.
ec_init or soem (unknown for exact version lookup from the sources)2.0.0 to a release that includes the fix (the fixed version is unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrives before timeout, the software attempts to use the cleared pointer, causing a crash. An attacker can trigger this with a simple sequence of two messages.
This page as .md · .json · in your agent: get_signal("CVE-2026-82946")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.