1,178 results · Clear filters · Feed
-
Critical max 9.0ICSA-26-307-01 2 CVEs
Subnet Solutions PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources.
-
Critical max 9.4
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in information disclosur…
first Oct 15, 2026 -
Critical max 9.4
Eufy Omni C20, Omni X10 Pro (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code.
first Sep 24, 2026 -
Critical max 9.8ICSA-26-300-01 4 CVEs
EPICS Base
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code.
-
Critical max 9.1
Siemens Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that cou…
first Oct 13, 2026 -
Critical max 10.0
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for produ…
first Oct 13, 2026 -
Critical max 9.6
Siemens SIMATIC S7 PLCs Web Server
SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is prep…
first Oct 13, 2026 -
Critical max 9.8
Siemens RUGGEDCOM CROSSBOW Station Access Controller
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a …
first Oct 13, 2026 -
Critical max 10.0
Siemens SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
first Oct 13, 2026 -
Critical max 9.1
Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to …
first Oct 13, 2026 -
Critical max 9.9ICSA-26-295-01 9 CVEs
Kiloview E3 NDI Encoder
Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device.
-
Critical max 9.8ICSA-26-288-02 3 CVEs
Guangzhou Juan IoT Technology EseeCloud
Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.
-
Critical max 9.1ICSMA-26-288-02 6 CVEs
J4Care dcm4che
Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.
-
Critical max 9.8
Lantronix EDS3000PS and EDS5000 (Update B)
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code with root-level privileges.
first Mar 10, 2026 -
Critical max 9.8
-
Critical max 10.0
Hitachi Energy RTU500
Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were develop…
first Sep 29, 2026 -
Critical max 9.8ICSA-26-279-02 1 CVE
Savannah lwIP SMTP client
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.
-
Critical max 9.3VA-26-275-05 1 CVE
Cadmos LTI
The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Larave…
-
Critical max 10.0
Armatura LLC Armatura One
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to the database, execute arbitrary code on the host with the highest level of privilege, or gain control of the physical access-control system.
-
Critical max 9.4ICSA-26-274-02 4 CVEs
Monta monta.app
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
Critical max 9.8
-
Critical max 9.8
MikroTik RouterOS
Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution or cause a denial of service.
first Sep 29, 2026 -
Critical max 10.0ICSA-26-272-02 10 CVEs
Toptech TMS7 and TopHAT
Successful exploitation of these vulnerabilities could allow an attacker to access critical data or execute arbitrary code.
-
Critical max 9.3ICSA-26-272-03 1 CVE
VIVOTEK Camera Firmware
Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.
-
Critical max 9.8ICSA-26-272-05 9 CVEs
Anjvision YSSD-RTMP-H5
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, access user accounts, execute OS-level commands, or take full control over the device.
-
Critical max 10.0ICSA-26-272-07 2 CVEs
Viidure Dashcam Android Application
Successful exploitation of these vulnerabilities could allow attackers to access, modify, or delete sensitive user data and critical system files, potentially compromising the operation of the entire platform.
-
Critical max 9.0
Siemens Siveillance Control
A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability allows an attacker to upload arbitrary files, which can lead …
first Sep 8, 2026 -
Critical max 9.1
Siemens Industrial Edge Management
Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification. Siemens has released new versi…
first Sep 8, 2026 -
Critical max 9.8ICSA-26-265-01 1 CVE
lwIP TCP/IP Stack MQTT Client Application
Successful exploitation of this vulnerability could allow an attacker to gain full code execution on the device.
-
Critical max 9.8VA-26-260-01 2 CVEs
FatPipe software multiple vulnerabilities
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon and a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attac…
-
Critical max 8.8
Hitachi Energy FACTS Control Platform (FCP)
Hitachi Energy is aware of vulnerabilities that affect the FACTS Control systems with GWS component listed in this document. An attacker exploiting these vulnerabilities can cause impact on confidentiality, integrity and availability of the product. Following…
first Jul 28, 2026 -
Critical max 9.8
Siemens Reyrolle 7SR5
Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities. Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version.
first Sep 8, 2026 -
Critical max 9.6ICSA-26-258-01 6 CVEs
Digital Watchdog VMAX DVR and NVR Product Lineups
Successful exploitation of these vulnerabilities could grant full administrative control of the device, allowing an attacker to view live and recorded surveillance, alter device configurations, and use the device as a network pivot point.
-
Critical max 9.8ICSA-26-258-03 2 CVEs
mySCADA myPRO Manager
Successful exploitation of these vulnerabilities could allow an attacker to access privileged management functions or send arbitrary SMS messages through the connected GSM modem.
-
Critical max 9.6
IXON VPN Client
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution on the computer running the client with elevated privileges.
first Aug 5, 2026 -
Critical max 9.8ICSA-26-246-07 1 CVE
Pyramid Solutions NetStaX EtherNet/IP Stack
Successful exploitation of this vulnerability could result in memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.
-
Critical max 9.8
Tycon Systems TPDIN-Monitor-WEB2 (Update A)
Successful exploitation of these vulnerabilities could result in an attacker accessing sensitive credentials, disrupting connected infrastructure, or manipulating physical equipment, which could present a physical safety risk.
first Jul 21, 2026 -
Critical max 9.8ICSA-26-239-01 3 CVEs
Xiiaozet LK100W
Successful exploitation of these vulnerabilities could allow an attacker to take control over the device.
-
Critical max 9.8ICSA-26-239-04 2 CVEs
Applied Systems Engineering ASE2000 V2 Communications Test Set
Successful exploitation of these vulnerabilities could allow an attacker to read or write arbitrary local files, cause the application to issue outbound network requests, or intercept the connection to impersonate the trusted peer, complete the TLS handshake,…
-
Critical max 9.8ICSA-26-239-05 13 CVEs
Ebyte NA111-M
Successful exploitation of these vulnerabilities could allow an attacker to fully compromise the device.