4,097 results · Feed
-
High max 7.1
Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update B)
Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted packets under specific timing conditions. This could allow the…
first Jul 30, 2026 -
Critical max 9.4ICSA-26-307-01 2 CVEs
Subnet Solutions PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources.
-
High max 7.5
Hitachi Energy MSM Product (Update A)
Hitachi Energy is aware of open-source software vulnerabilities that affect MSM product versions listed in this document below. If exploited these vulnerabilities could result in XSS and DoS attacks potentially causing confidentiality, integrity and availabil…
first Sep 30, 2025 -
Medium max 5.5
Hitachi Energy PCM600 (Update A)
Hitachi Energy is aware of a vulnerability that affects the Hitachi Energy PCM600 product versions listed in this document. An attacker successfully exploiting this vulnerability can impact integrity of the product. Please refer to the Recommended Immediate A…
first Apr 28, 2026 -
High max 8.7
Siemens Mendix SAML
Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.
first Sep 3, 2026 -
Medium max 6.8
Siemens Mendix SAML Module
Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for…
first Oct 26, 2026 -
High max 8.7
Hitachi Energy TRO600 series products
Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and disclosure of sensitive informa…
first Oct 27, 2026 -
High max 8.8
Hitachi Energy CoreTec Product
Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability…
first Oct 27, 2026 -
Critical max 9.4
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in information disclosur…
first Oct 15, 2026 -
Critical max 9.4
Eufy Omni C20, Omni X10 Pro (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code.
first Sep 24, 2026 -
Critical max 9.8ICSA-26-300-01 4 CVEs
EPICS Base
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code.
-
High max 8.1VA-26-294-01 4 CVEs
HAPI FHIR
SmileCDR HAPI FHIR contains multiple vulnerabilities. In the worst case, a user could read or write content in a tenant partition that they should not have access to, or an unauthenticated user could trigger a denial-of-service.
-
High max 8.1VA-26-296-01 1 CVE
AgentZero XSS
The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any injected JavaScript is executed in the context of the victim’s authenticated Agen…
-
High max 7.7
Meari IoT Cloud Platform OpenAPI Service (Update A)
Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorizati…
first Oct 1, 2026 -
High max 8.3
Siemens Industrial Edge App Publisher
The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the manageme…
first Oct 13, 2026 -
Medium max 5.3
Siemens Capital Embedded AR Classic
The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends …
first Oct 13, 2026 -
Medium max 5.8
Siemens SENTRON 3NA COM Fuse
SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-establ…
first Oct 13, 2026 -
High max 7.0
Siemens PSS(R)SINCAL
PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to…
first Oct 13, 2026 -
High max 7.7
Siemens SIMATIC IPCs
The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new version…
first Oct 13, 2026 -
High max 8.2
Siemens APOGEE, TALON and Desigo PXC/PXM Products
The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends…
first Oct 13, 2026 -
Critical max 9.1
Siemens Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that cou…
first Oct 13, 2026 -
High max 7.5
Siemens SIMATIC S7 Webserver API
.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Clien…
first Oct 13, 2026 -
Critical max 10.0
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for produ…
first Oct 13, 2026 -
High max 8.8
Siemens RUGGEDCOM CROSSBOW
RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as mod…
first Oct 13, 2026 -
High max 8.8
Siemens WinCC
Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several a…
first Oct 13, 2026 -
Critical max 9.6
Siemens SIMATIC S7 PLCs Web Server
SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is prep…
first Oct 13, 2026 -
Critical max 9.8
Siemens RUGGEDCOM CROSSBOW Station Access Controller
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a …
first Oct 13, 2026 -
Critical max 10.0
Siemens SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
first Oct 13, 2026 -
Critical max 9.1
Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to …
first Oct 13, 2026 -
High max 7.5
Siemens RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update info…
first Oct 13, 2026 -
Medium max 6.7
Siemens Software Center
The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution …
first Oct 15, 2026 -
Critical max 9.9ICSA-26-295-01 9 CVEs
Kiloview E3 NDI Encoder
Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device.
-
High max 8.1ICSMA-26-295-01 1 CVE
InterSystems Corporation InterSystems IRIS for Health
Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.
-
High max 9.2
PHP insecure error handling and state management
PHP insecurely handles multiple combinations of memory allocations and error conditions. These behaviors can allow a remote attacker to cause a denial of service or execute arbitrary code. Successful exploitation depends on a number of factors including the s…
-
High max 8.7
Hitachi Energy RTU500 Product (Update A)
Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. Successful exploitation of these vulnerabilities can result in the exposure of low-value user management information and device outage. Please refer to the…
first Feb 24, 2026 -
High max 8.5
Hitachi Energy MicroSCADA X SYS600 Product
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions…
first Sep 1, 2026 -
High max 9.8
Hitachi Energy RTU500 Product
Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate…
first Sep 1, 2026 -
High max 7.1ICSA-26-293-01 5 CVEs
HMS Networks PEAK-System PCAN Windows drivers
Successful exploitation of these vulnerabilities could crash the Windows kernel.
-
High max 8.6ICSA-26-293-03 2 CVEs
Moxa AIG-302 ThingsPro Edge
Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information.
-
High max 8.1first Oct 7, 2026