CISA ICSA-26-246-07: Pyramid Solutions WebDAV memory corruption advisory

Summary of Key Vulnerability Information Vulnerability Overview Vulnerability ID: ICSA-26-246-07 Organization: Pyramid Solutions (CISA Report) CVSS Score: 7.0 (Medium-High Risk) Vulnerability Type: Successful exploitation of this vulnerability can lead to memory corruption, device crashes, or potential information disclosure Affected Product: Pyramid Solutions WebDAV EtherNet/IP Stack Current Release Date: 2026-09-03 Engine: CISA CSAP Generator, version 7.6.0 Impact Scope Affected Industries (Critical Infrastructure Sectors): Key manufacturing, energy, water and wastewater treatment, chemicals Deployment Location: Global Country: United States Company Headquarters Location: United States Recommendations: CISA recommends that users adopt defensive measures to reduce the risk of exploitation of this vulnerability; CISA also recommends that organizations conduct an impact analysis and risk assessment before deploying defensive measures; CISA encourages organizations to implement the recommended cybersecurity policies on ICS webpages for active defense; organizations should follow established internal procedures and report any suspicious malicious activity discovered; specific exploitation of this vulnerability has been reported to CISA. Remediation (Recommended Practices / Mitigations) CISA Recommended Practices: Implement the recommended cybersecurity policies on ICS webpages for active defense Follow established internal procedures and report any suspicious malicious activity discovered Specific exploitation of this vulnerability has been reported to CISA Mitigations (Remediations): Details: WebDAV v5.1 addresses this issue through multi-layered defenses (including full sequence assertions) Products: - CISA-26-246-07 - CISA-26-246-07 - CISA-26-246-07 - CISA-246-07 - CISA-246-07 - CISA-246-07 - CISA-246-07 URL: https://pyramidsolutions.com/en/account/ POC / Exploit Code This page is a vulnerability advisory in JSON format (icsa-26-246-07.json) and does not include POC or exploit code blocks; it only contains structured fields such as metadata, impact scope, recommended practices, and mitigations.

Goal Reached Thanks to every supporter — we hit 100%!

CISA ICSA-26-246-07: Pyramid Solutions WebDAV memory corruption advisory

More from this source