Critical Airleader Vulnerability Enables Remote Code Execution Attacks

Critical Airleader Vulnerability Enables Remote Code Execution Attacks

First seen 16 Feb 2026, 19:09 UTC CybersecuritynewsCyberpress 72.6

Article Content

Browse articles
ThreatCluster

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) disclosed a critical vulnerability in the Airleader industrial control system on February 12, 2026. Assigned CVE-2026-1358, the flaw has a CVSS v3 score of 9.8 and affects all versions of Airleader, potentially allowing remote code execution attacks across multiple critical infrastructure sectors.

Timeline

2026-02-12
CVE-2026-1358 published
2026-02-16
CISA disclosed Airleader vulnerability