541 results · Feed
-
Medium max 5.4VDE-2026-138 1 CVE
Welotec: Trust in Compromised Intermediate Certificates in egOS
The egOS system trust store uses certificate data from the Mozilla NSS root store. The trust store contains eMudhra emSign root certificates associated with eight compromised intermediate certificate authority keys. An unauthenticated attacker who possesses o…
-
High max 8.5VDE-2026-087 3 CVEs
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function calls.
-
Medium max 9.2
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT affected by PHP vulnerability
The Weidmueller security routers IE-SR-4TX and IE-SR-4GT in firmware releases prior to 2.3.4 bundle a PHP version that is affected by CVE-2026-109618. In the configuration used by the products, the vulnerability can allow an attacker to cause a denial of serv…
-
Critical max 9.2
MB connect line: php2shell in mbCONNECT24/mymbCONNECT24
MB connect line mbCONNECT24/mymbCONNECT24 ships with a bundled PHP version that is affected by two vulnerabilities known as "php2shell".
-
Critical max 8.7VDE-2026-079 12 CVEs
MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow RCE, DoS or information leakage.
-
Critical max 9.2
Helmholz: php2shell in myREX24V2/myREX24V2.virtual
Helmholz myREX24V2/myREX24V2.virtual ships with a bundled PHP version that is affected by two vulnerabilities known as "php2shell".
-
Critical max 8.7VDE-2026-141 12 CVEs
Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual
Multiple vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual that could allow RCE, DoS or information leakage.
-
Critical max 9.8
Bender EDGE500IP Vulnerabilities - Linux Kernel (TLS and AF_ALG)
Bender is publishing this advisory to inform customers about two vulnerabilities in the Linux kernel used by the EDGE500IP. CISA has added both vulnerabilities (CVE-2025-39682 and CVE-2025-39964) to its Known Exploited Vulnerabilities catalog. Bender has anal…
-
Medium max 9.2
ads-tec Industrial IT: PHP Vulnerability in ADS-TEC IRF Products and Web Terminals
The ADS-TEC IRF1000 and IRF3000 products in firmware releases prior to 2.3.3, the IRF2000 products in firmware releases prior to 5.0.12 and the ADS-TEC web terminals DVG-SHW9019, DVG-SHW9024, DVG-MEW9016, DVG-MEW9019, DVG-MEW9024, DVG-OPW9016, DVG-OPW9019 and…
-
High max 7.8
WAGO: Multiple PLCs and Communication Components are Affected by multiple Vulnerabilities leading to RCE
Multiple WAGO devices are affected by CODESYS Control vulnerabilities. The affected WAGO firmware versions are <4.10.0 (FW32) and <4.10.0 (70).
-
Critical max 9.2
Two critical PHP vulnerabilities in several Festo Didactic products
Festo Didactic FactoryViews and MES4 deployed along with xampp bundle an Apache web server with PHP. The bundled version of PHP is vulnerable to the two critical vulnerabilities CVE-2026-109618 and CVE-2026-109619 (commonly referred to as PHP2Shell). These vu…
first Nov 2, 2026 -
Critical max 9.1VDE-2026-102 1 CVE
WAGO: Unauthorized Account Access via Credential Recovery Process
A vulnerability in the authentication and credential recovery process may allow an unauthenticated attacker to bypass intended verification controls during password reset operations. By exploiting this weakness, an attacker could reset credentials for arbitra…
-
High max 8.6VDE-2026-098 5 CVEs
Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in License Validation for SW Tools
This advisory addresses multiple security vulnerabilities in Phoenix Contact products using the software CodeMeter Runtime like licensed desktop software tools. These security vulnerabilities only may occur with CodeMeter Runtime 8.x versions <V8.41a and Code…
-
High max 8.6VDE-2026-084 4 CVEs
Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in License Validation in the PLCnext Firmware
This advisory addresses security vulnerabilities in Phoenix Contact products with an integrated CodeMeter Runtime, like PLCnext devices and Virtual Controls. These security vulnerabilities only may occur with versions <8.41a of the integrated software CodeMet…
-
Critical max 9.2
WAGO: Multiple Devices affected by PHP2Shell
Critical vulnerabilities in the PHP runtime may allow a remote attacker to execute arbitrary code by exploiting weaknesses in PHP's internal memory and request handling mechanisms. Under specific conditions, specially crafted web requests can trigger unexpect…
first Nov 2, 2026 -
High max 8.4VDE-2026-121 3 CVEs
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities have been identified in PLCnext Engineer prior to version 2026.6. The effects of these vulnerabilities may result in a complete loss of confidentiality, inte…
-
High max 7.2VDE-2026-119 6 CVEs
Welotec: Multiple vulnerabilities in TK routers
Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote attacker with high privileges to inject commands or trigger a buffer overflow. Successful exploitation may resu…
-
High max 7.5
VEGA: Unsecured Configuration Interface Allows Unauthorized Access Leading to Privilege Escalation
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed cre…
first Apr 22, 2026 -
Critical max 9.2
Welotec: PHP2Shell Vulnerabilities in SMART EMS
Two memory-safety vulnerabilities in the PHP runtime bundled with SMART EMS allow an unauthenticated remote attacker to execute arbitrary code in the context of the PHP web worker. All SMART EMS versions up to and including v3.5.3 are affected. Exploitability…
-
Critical max 9.2
METTLER TOLEDO: PHP2Shell in Octo Image Server
OCTO Image Server contains a vulnerable version of PHP affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). We strongly recommend to upgrade PHP to version 8.2.35.
-
High max 7.5
CODESYS Gateway Client - Uncontrolled Memory Allocation
The CODESYS Gateway Client (CmpGwClient) is used by various CODESYS products to establish PLC communication via the CODESYS Gateway. Due to missing limits on memory allocations derived from a size field in a gateway response, a malicious gateway can cause exc…
first Sep 30, 2026 -
High max 8.1
CODESYS Control Runtime - Improper Synchronization in Monitoring
The monitoring functionality of affected CODESYS Control runtime systems processes read and write requests to PLC application data sent by the CODESYS Development System and other clients such as HMIs. Due to improper synchronization in the CmpMonitor2 compon…
first Sep 30, 2026 -
Critical max 8.8FSA-202602 2 CVEs
Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE
Festo AX OS versions 25.0.1.46 and 25.9.2.4, which are based on PLCnext by Phoenix Contact, used by the Festo product CEPE are affected by multiple OpenSSL vulnerabilities. The vulnerabilities are identified as CVE-2025-15467 and CVE-2025-69419. Attacks may b…
-
High max 6.9PPSA-2026-005 3 CVEs
Pilz: Vulnerabilities in 'PiCtory' and 'RevPiPyLoad' for Industrial PC IndustrialPI
The 'Pictory' web config tool, prior to 2.17.0, has a Cross-Site Request Forgery (CSRF) vulnerability, which makes it vulnerable to session takeover. The 'revpipyload' package, prior to version 0.11.1, has a vulnerability in the file management functionality …
-
High max 7.3PPSA-2026-004 3 CVEs
Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI
The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.
-
Critical max 9.8VDE-2026-112 1 CVE
METTLER TOLEDO: STARe Software DB2 vulnerable component
A vulnerability identified as CVE-2026-10109 affects the external component IBM Db2 12.1.2 delivered with STARe v20.00. The vulnerability is associated with improper handling of the pre-authentication DRDA handshake in affected IBM Db2 versions
-
Medium max 4.3VDE-2026-109 1 CVE
Bender Customer&Partner Platform Vulnerability - Privilege Escalation
Bender is publishing this advisory to inform customers about a security vulnerability in the Customer&Partner platform. The issue allows any account to view the roles of other users. Bender has analyzed the weakness and determined that user information and us…
-
Critical max 9.8VDE-2026-108 1 CVE
Murrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS Data
The aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by Murrelektronik GmbH on GitHub for the LNI 4.0 testbed demonstrator. Its REST API is bound to all network interfaces on TCP port 18000, requ…
-
Medium max 7.5
VEGA: Missing Authentication for critical function in VEGAPULS two- and four-wire products
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed cre…
first May 4, 2026 -
Medium max 7.5
VEGA: Missing Authentication for critical function in VEGAPULS Bluetooth products
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed cre…
first May 4, 2026 -
Medium max 7.5
VEGA: Missing Authentication for critical function in VEGAPULS Air products
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed cre…
first May 4, 2026 -
Critical max 9.8VDE-2025-102 1 CVE
WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack
Multiple WAGO devices are affected by a vulnerability in the dynamic creation of BACnet File Objects. The object name is used as a file path without sufficient validation and is not restricted to the intended directory, so relative paths can be used to reach …
-
Critical max 9.6VDE-2026-089 1 CVE
Lenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT Gateway
The Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the computer running the client with elevated privileges.
-
Critical max 9.8
iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator
A vulnerability has been identified in ibaPDA, ibaDatCoordinator and ibaLogic. The affected applications do not properly restrict the .NET BinaryFormatter when deserializing client-server input. This could allow an attacker to cause a type confusion and execu…
first Jun 17, 2026 -
Critical max 9.8VDE-2026-027 20 CVEs
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerabilities that can be used to bypass authentication. Code can be executed on the devices through command injection and local file inclusion. Path traversal and modified s…
-
Critical max 9.8VDE-2026-014 20 CVEs
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be executed on the devices through command injection and local file inclusion. Path traversal and modified schemata can be used to read sensitive informatio…
-
Critical max 9.8VDE-2026-028 20 CVEs
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be executed on the devices through command injection and local file inclusion. Path traversal and modified schemata can be used to read sensitive informatio…
-
High max 8.6VDE-2026-091 5 CVEs
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowing privilege escalation.
-
Critical max 9.6
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25. The vulnerabilities found in LabX E…
first Aug 20, 2026 -
Critical max 9.3VDE-2026-093 1 CVE
SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mechanism allowing remote code execution
A vulnerability has been found in the firmware update process of SAUTER Building Controllers. The identified vulnerability could allow unauthorized code execution on affected controllers.