1,185 results · Clear filters · Feed
-
Critical max 9.6ICSA-26-258-01 6 CVEs
Digital Watchdog VMAX DVR and NVR Product Lineups
Successful exploitation of these vulnerabilities could grant full administrative control of the device, allowing an attacker to view live and recorded surveillance, alter device configurations, and use the device as a network pivot point.
-
Critical max 9.8ICSA-26-258-03 2 CVEs
mySCADA myPRO Manager
Successful exploitation of these vulnerabilities could allow an attacker to access privileged management functions or send arbitrary SMS messages through the connected GSM modem.
-
Critical max 9.6
IXON VPN Client
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution on the computer running the client with elevated privileges.
first Aug 5, 2026 -
Critical max 9.8ICSA-26-246-07 1 CVE
Pyramid Solutions NetStaX EtherNet/IP Stack
Successful exploitation of this vulnerability could result in memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed.
-
Critical max 9.8
Tycon Systems TPDIN-Monitor-WEB2 (Update A)
Successful exploitation of these vulnerabilities could result in an attacker accessing sensitive credentials, disrupting connected infrastructure, or manipulating physical equipment, which could present a physical safety risk.
first Jul 21, 2026 -
Critical max 9.8ICSA-26-239-01 3 CVEs
Xiiaozet LK100W
Successful exploitation of these vulnerabilities could allow an attacker to take control over the device.
-
Critical max 9.8ICSA-26-239-04 2 CVEs
Applied Systems Engineering ASE2000 V2 Communications Test Set
Successful exploitation of these vulnerabilities could allow an attacker to read or write arbitrary local files, cause the application to issue outbound network requests, or intercept the connection to impersonate the trusted peer, complete the TLS handshake,…
-
Critical max 9.8ICSA-26-239-05 13 CVEs
Ebyte NA111-M
Successful exploitation of these vulnerabilities could allow an attacker to fully compromise the device.
-
Critical max 9.3
Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, gain control over the products, or impersonate the web applications.
first Mar 11, 2025 -
Critical max 9.8ICSA-26-237-06 11 CVEs
Ebyte NE2-D11
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized administrative access, disclose sensitive information, modify device configuration, hijack authenticated sessions, and disrupt device operation.
-
Critical max 9.1ICSA-26-237-07 2 CVEs
FURUNO FA-50 Class B AIS Transponder
Successful exploitation of these vulnerabilities could allow an attacker to alter device settings.
-
Critical max 9.1
Siemens Siveillance Video
Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Aug 11, 2026 -
Critical max 10.0ICSA-26-225-02 1 CVE
Haiwell IoT Cloud HMI Gateway
Successful exploitation of this vulnerability may allow an attacker to inject and execute arbitrary OS commands with root privileges.
-
Critical max 8.7
Johnson Controls C-CURE 9000 and Victor application server (Update A)
Successful exploitation of these vulnerabilities could allow an attacker with network access to achieve remote code execution.
first Jul 23, 2026 -
Critical max 9.8ICSMA-26-223-01 8 CVEs
Mira Hormone Monitor, Mira Android App
Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized health profile information, make changes to health information, cause a denial-of-service condition, disclose session token information, and obtain control of user…
-
Critical max 10.0
Metabase SQL injection
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL. In the worst case an attacker could gain administrative privileges.
-
Critical max 9.8VA-26-216-01 3 CVEs
IxChariot Endpoint buffer overflow
Keysight IxChariot Endpoint, Hawkeye, IxTap, IxByPass, and IxProbe contain one or more buffer overflow vulnerabilities. In the worst case, a remote unauthenticated attacker could execute arbitrary code.
-
Critical max 9.8
Appriss Insights VINE Application SQL Injection
The Appriss Insights (Equifax) VINE applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information f…
first Jul 23, 2026 -
Critical max 8.8
Siemens Desigo CC
OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends t…
first Jul 14, 2026 -
Critical max 10.0
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends specific countermeasure…
first Jul 14, 2026 -
Critical max 10.0ICSA-26-204-04 5 CVEs
Panduit IntraVUE
Successful exploitation of these vulnerabilities could allow an attacker with access to the IT network to manipulate industrial control devices without requiring physical access, specialized insider knowledge, or advanced tooling.
-
Critical max 10.0
Siemens Opcenter X
Opcenter X before V2604 contain an authentication bypass vulnerability that could allow an attacker to gain full unauthorized access to the application. Siemens has released a new version for Opcenter X and recommends to update to the latest version.
first Jul 14, 2026 -
Critical max 9.8
Siemens SIDIS Secured SmartPlug
SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the …
first Jul 14, 2026 -
Critical max 9.8
Siemens CADRA
CADRA is affected by multiple zlib and Foxit vulnerabilities. Siemens has released a new version for CADRA and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fix…
first Jul 14, 2026 -
Critical max 9.9
ABB T-MAC Plus
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves the reported vulnerabilities. An attacker who successfully exploited any of these vulnerabilities could potentially compromise …
first Jun 3, 2026 -
Critical max 10.0ICSA-26-195-04 1 CVE
Rockwell Automation 1715-AENTR EtherNet/IP Adapter
Successful exploitation of this vulnerability could allow an attacker to read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.
-
Critical max 9.0
Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC
This advisory documents the impact of CVE-2024-3596 (also dubbed "Blastradius"), a vulnerability in the RADIUS protocol, to SCALANCE, RUGGEDCOM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the…
first Jul 9, 2024 -
Critical max 9.1
Siemens RUGGEDCOM APE1808 Devices
Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens is preparing fix versions and recommends to consult and implement the workarounds provided in Fortinet's upstream security n…
first May 13, 2025 -
Critical max 9.9ICSA-26-190-01 1 CVE
OpenPLC v3
Successful exploitation of this vulnerability could allow an authenticated attacker to write arbitrary files to the filesystem and escalate this into arbitrary native code execution through the normal OpenPLC program compilation process, potentially resulting…
-
Critical max 9.0
Siemens SIPROTEC and SICAM
This advisory documents the impact of CVE-2024-3596 (also dubbed "Blastradius"), a vulnerability in the RADIUS protocol, to SIPROTEC, SICAM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the RAD…
first May 13, 2025 -
Critical max 9.8
Siemens User Management Component (UMC)
Siemens' User Management Component (UMC) is affected by multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. Siemens has released a new version for User Management Co…
first Sep 9, 2025 -
Critical max 9.8
Siemens SINEC OS
SINEC OS before V4.0 contains multiple vulnerabilities. Siemens has released a new version for RUGGEDCOM RST2428P and recommends to update to the latest version.
first Jun 2, 2026 -
Critical max 9.8ICSA-26-188-01 3 CVEs
Hydro-Québec Le Circuit Electrique charging station backend
Successful exploitation of these vulnerabilities could lead to privilege escalation, or result in a denial-of-service attack.
-
Critical max 9.8
WHILL Model C2 Electric Wheelchairs and Model F Power Chairs (Update B)
Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to take control over the product.
first Dec 30, 2025 -
Critical max 8.7
Siemens RUGGEDCOM APE1808 Devices
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where f…
first May 12, 2026 -
Critical max 9.8
Gardyn Home Kit (Update B)
Successful exploitation of these vulnerabilities could allow unauthenticated users to access and control edge devices, access cloud-based devices and user information without authentication, and pivot to other edge devices managed in the Gardyn cloud environm…
first Feb 24, 2026 -
Critical max 10.0ICSA-26-183-03 3 CVEs
Gardyn IoT Hub
Successful exploitation of these vulnerabilities could allow unauthenticated users to access and control IoT Hub managed devices.
-
Critical max 10.0ICSA-26-181-06 5 CVEs
StoneFly Storage Concentrator
Successful exploitation of these vulnerabilities could allow attackers to gain broad unauthorized access, execute arbitrary commands with root privileges, steal sensitive data, and perform actions on behalf of legitimate users across interconnected systems.
-
Critical max 9.3ICSA-26-181-07 2 CVEs
Delta Electronics DVP12SE PLC
Successful exploitation of these vulnerabilities could allow an attacker to remotely issue commands, modify operational values, interfere with control logic, and alter device behavior without authentication or privilege enforcement.
-
Critical max 9.8ICSMA-26-181-01 5 CVEs
OFFIS DCMTK Toolkit
Successful exploitation of these vulnerabilities could allow an attacker to write files, access unauthorized information, exhaust memory, or crash affected DCMTK client or server processes.