CVE-2026-78319: CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition in Sauter modu680-AS

This vulnerability is a TOCTOU race condition (CWE-367) in a service of the Sauter modu680-AS product. The flaw allows an unauthenticated remote attacker to exploit the timing window between checking a condition and using the result, thereby bypassing intended security controls. This can lead to unauthorized code execution on the affected system. The CVSS 4.0 base score is 9.3, indicating critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The affected version explicitly identified is 1.0.0. No patch or remediation level is currently provided by the vendor, and no known exploits in the wild have been reported.

Successful exploitation allows an unauthenticated remote attacker to bypass security controls and execute unauthorized code, potentially compromising confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published at this time.