Is CVE-2022-26077 actively exploited?

No active exploitation of CVE-2022-26077 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-26077 be exploited remotely?

Yes. CVE-2022-26077 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-26077?

CVE-2022-26077 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2022-26077

HIGH

CVE-2022-26077

CWE-319Published: May 25, 2022· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.

NVD Source

Technical Analysis

CVE-2022-26077 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 7.5.