Search: CVE-2026-18768

CVE-2026-18768 is a high-severity vulnerability in Beckhoff Automation's TcRouter.sys driver for Windows x64. It allows a local low privileged attacker to access arbitrary physical memory or define its mapping due to exposed IOCTL function calls with insufficient access control. This flaw can lead to a full compromise of affected devices. The vulnerability affects versions 1.0.0 up to but not including 3.1.0.2365 and 3.16.29 up to but not including 3.18.1. Fixed versions are 3.1.0.2365 and 3.18.1.