CVE-2026-78319
Critical
Description
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code.
SeverityCritical
CVSS9.3
Exploit probability—
Productmodu680-AS
PublishedSep 1, 2026
First seenSep 1, 2026
Weakness typeCWE-367CWE-367
How to fix
Update
- Sauter modu680-AS4.0.0 or later
- Sauter modu660-AS4.0.0 or later
- Sauter modu612-LC4.0.0 or later
- Sauter ecos5047.0.0 or later
- Sauter ecos5057.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Sauter modu680-AS | 1.0.0 ≤ v < 4.0.0 | 4.0.0 |
| Sauter modu660-AS | 1.0.0 ≤ v < 4.0.0 | 4.0.0 |
| Sauter modu612-LC | 1.0.0 ≤ v < 4.0.0 | 4.0.0 |
| Sauter ecos504 | 1.0.0 ≤ v < 7.0.0 | 7.0.0 |
| Sauter ecos505 | 1.0.0 ≤ v < 7.0.0 | 7.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.