1,943 results · Clear filters · Feed
-
High max 7.3VA-26-202-01 1 CVE
ASUS AURA SYNC driver local privilege escalation
Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation.
-
High max 5.7
Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement the workarounds provided in Palo Alto …
first Jul 14, 2026 -
High max 8.8ICSA-26-202-07 1 CVE
Rockwell Automation FactoryTalk Services Platform
Successful exploitation of this vulnerability could allow an attacker to impersonate an authorized user on the FTSP server, resulting in unauthorized access to system configurations.
-
High max 8.7ICSA-26-202-08 1 CVE
Rockwell Automation 1718-AENTR/1719-AENTR
Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product.
-
High max 7.3ICSA-26-202-10 3 CVEs
Rockwell Automation Studio 5000 Logix Designer
Successful exploitation of these vulnerabilities could allow for a local attacker to execute arbitrary files, alter configurations, or execute arbitrary code.
-
High max 7.0ICSA-26-197-01 4 CVEs
Rockwell Automation Arena
Successful exploitation these vulnerabilities could allow an attacker to execute arbitrary code in the context of the current process.
-
High max 8.7ICSA-26-197-02 1 CVE
Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
High max 7.5ICSA-26-197-03 1 CVE
NASA Core Flight System (cFS) Health & Safety (HS) Application
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.
-
High max 7.0ICSA-26-197-04 6 CVEs
AutomationDirect Productivity Suite
Successful exploitation of these vulnerabilities could allow an attacker with local or physical access to cause memory corruption, unintended information disclosure, application instability, or a denial-of-service condition in the affected product.
-
High max 9.2ICSA-26-197-06 3 CVEs
Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
-
High max 8.7ICSA-26-197-08 1 CVE
Rockwell Automation Flex 5000 Adapter
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected product.
-
High max 7.8
ABB Ability Edgenius
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
first Jun 25, 2026 -
High max 7.2VA-26-190-01 1 CVE
LibreBooking path traversal
LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code.
-
High max 8.8VA-26-190-03 1 CVE
Allwinner TV Box TV98 ADB exposed on network
Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.
-
High max 8.9
Siemens RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to upda…
first Jan 13, 2026 -
High max 8.2
Siemens Engineering Platforms
Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arb…
first Aug 12, 2025 -
High max 7.0
Hitachi Energy PROMOD V
Hitachi Energy is aware of insecure HTTP transmission vulnerability in PROMOD V product versions listed in this document. This vulnerability could allow attackers to intercept or manipulate sensitive data in transit, potentially leading to credential theft, s…
first Jun 30, 2026 -
High max 8.1
Hitachi Energy e-mesh EMS
Hitachi Energy is aware of a buffer overflow vulnerability that affects e-mesh EMS product versions listed in this document. Successful exploitation of this vulnerability could lead to a buffer overflow condition, potentially resulting in application outages …
first Jun 30, 2026 -
High max 8.4ICSA-26-188-06 3 CVEs
Labcenter Proteus 9
Successful exploitation of these vulnerabilities could disclose information and allow a malicious user to execute arbitrary code on affected installations.
-
High max 7.1VA-26-188-01 1 CVE
FluxInk Color Management Driver local privilege escalation
An attacker with a standard user account on a device could escalate their privileges via arbitrary physical memory mapping at \Device\PhysicalMemory.
-
High max 7.5
Siemens SIMATIC and SIPLUS products
Siemens ET 200 devices contain a denial-of-service vulnerability that could be triggered by sending a valid S7 protocol Disconnect Request (COTP DR TPDU), causing the device to become unresponsive and require a power cycle to recover. Siemens has released new…
first Jan 13, 2026 -
High max 7.8
Siemens Simcenter Femap
Simcenter Femap is affected by file parsing vulnerabilities in Datakit library and Parasolid Translator Component that could be triggered when the application reads files in IPT or IGS format. If a user is tricked to open a malicious file with the affected ap…
first May 12, 2026 -
High max 8.7
XZ Utils vulnerability impacting B&R Products
An update is available that resolves vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or corrupt memory data.
first Jun 10, 2026 -
High max 7.0ICSA-26-181-01 4 CVEs
Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M
Successful exploitation of these vulnerabilities could allow a local attacker to tamper with or destroy information in the affected product, cause a denial-of-service condition in the affected product, or execute arbitrary code when a specially crafted archiv…
-
High max 7.5ICSA-26-181-02 1 CVE
Frangoteam FUXA SCADA/HMI
Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to enumerate all user accounts and role assignments on a FUXA SCADA/HMI instance.
-
High max 8.1VA-26-177-01 1 CVE
extract-zip unvalidated symlink path traversal
extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to p…
-
High max 8.7
Schneider Electric PowerLogic P7
Schneider Electric is aware of a vulnerability in its PowerLogic™ P7 product. The PowerLogic™ P7 is a protection and control platform designed for complex and advanced electrical network applications. Failure to apply the remediation provided below may risk u…
first Jun 9, 2026 -
High max 8.7
Schneider Electric EasyLogic T150 and Saitel DP RTU
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-select…
first Jun 9, 2026 -
High max 8.4
AzeoTech DAQFactory (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious .ctl files that may lead to arbitrary code execution.
first Jun 18, 2026 -
High max 8.2ICSA-26-176-01 1 CVE
Yokogawa FAST/TOOLS and CI Server
Successful exploitation of this vulnerability may return a response containing the CI Server setting information.
-
High max 8.4ICSA-26-176-03 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could allow a local attacker to disclose information and execute arbitrary code.
-
High max 9.8ICSA-26-176-04 3 CVEs
Daktronics Controller Firmware
Successful exploitation of these vulnerabilities could could provide an unauthenticated user with complete root-level access and control of the system.
-
High max 7.2ICSA-26-176-05 2 CVEs
H.VIEW HV-500S6 IP Camera
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code and upload malicious files to the affected device.
-
High max 8.4ICSA-26-176-06 1 CVE
Delta Electronics DTM Soft
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 8.2ICSMA-26-176-02 1 CVE
OHIF Viewers DICOM
Successful exploitation of this vulnerability in a custom integration version could allow an attacker to steal an authenticated clinician's token via a crafted link.
-
High max 8.5
Rockwell Automation Arena (Update C)
Successful exploitation of these vulnerabilities could result in execution of arbitrary code.
first Dec 10, 2024 -
High max 7.4
Brightpick Mission Control / Internal Logic Control (Update A)
Successful exploitation of these vulnerabilities could result in the exposure of sensitive information and the manipulation of critical functions by an attacker.
first Nov 13, 2025 -
High max 7.1
Siemens WinCC Certificate Manager
WinCC Certificate Manager insufficiently protects key material that could allow an attacker to extract sensitive information. Siemens has released a new version for SIMATIC WinCC Unified PC Runtime V21 and recommends to update to the latest version. Siemens r…
first Jun 9, 2026 -
High max 8.8
Siemens SINEC INS
SINEC INS before V1.0 SP2 Update 6 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
first Jun 9, 2026 -
High max 8.8
Impact of Linux Kernel vulnerabilities on B&R products
B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the af…
first Jun 11, 2026