CVE-2026-78319

published 2026-09-01

CVE-2026-78319: A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remote attacker could…

Priority P2 61 critical 9.3 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition.
An unauthenticated remote attacker could exploit this race condition to bypass intended security controls.
This may result in the execution of unauthorized code.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
sauter	ecos504	>= 1.0.0 < 7.0.0	7.0.0
sauter	ecos505	>= 1.0.0 < 7.0.0	7.0.0
sauter	modu612-lc	>= 1.0.0 < 4.0.0	4.0.0
sauter	modu660-as	>= 1.0.0 < 4.0.0	4.0.0
sauter	modu680-as	>= 1.0.0 < 4.0.0	4.0.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-367