4,105 results · Feed
-
Critical max 9.4
SWTCH EV swtchenergy.com (Update A)
Successful exploitation of these vulnerabilities could allow attackers to impersonate charging stations, hijack sessions, suppress or misroute legitimate traffic to cause large-scale denial-of-service, and manipulate data sent to the backend.
first Feb 26, 2026 -
Medium max 5.5
ABB PCM600
An update is available that resolves vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could insert and run arbitrary code in the system.
first Nov 3, 2025 -
High max 8.4
Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.
first Nov 25, 2025 -
High max 8.8
ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities
ABB became aware of multiple internally discovered vulnerabilities in the WebPro SNMP card PowerValue for the product versions listed as affected in the advisory. Depending upon the vulnerability, an attacker with access to local network who successfully expl…
first Jan 7, 2026 -
High max 7.8ICSA-26-132-01 1 CVE
Fuji Electric Tellus
Successful exploitation of this vulnerability could allow an attacker to elevate privileges from user to system, which may then enable the attacker to cause a temporary denial of service, open files, or delete files.
-
High max 8.2ICSA-26-132-02 4 CVEs
Subnet Solutions PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an authenticated attacker to expose sensitive information or cause a CRLF injection.
-
High max 8.3
ABB AC500 V3 Multiple Vulnerabilities
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory. An update is available that resolves these vulnerabilities. An attacker who successfully exploited these vulnerabilities could bypass the user management and…
first Feb 24, 2026 -
Medium max 5.3
ABB Automation Builder Gateway for Windows
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory. The Windows gateway is accessible remotely by default. Unauthenticated attackers can therefore search for PLCs, but the user management of the PLCs prevents …
first Feb 24, 2026 -
Critical max 8.8
ABB AC500 V3 Stack Buffer Overflow in Cryptographic Message Syntax
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves publicly reported vulnerability. An attacker who successfully exploited these vulnerabilities could cause a crash, denial-of-se…
first Mar 12, 2026 -
Medium max 5.2
Medtronic MyCareLink 24950 Patient Monitor (Update A)
Successful exploitation of these vulnerabilities may allow an attacker with physical access to obtain per-product credentials that are utilized to authenticate data uploads and encrypt data at rest. Additionally, an attacker with access to a set of these cred…
first Aug 7, 2018 -
High max 8.1
Schneider Electric EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon M340, M580 and M580 Safety PLCs
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Control Expert , EcoStruxure Process Expert and Modicon M340, M580 PLCs (Programmable Logic Controllers). Modicon PLCs control and monitor industrial operations. EcoStruxure Control Ex…
first Feb 13, 2024 -
Medium max 6.8
Medtronic MyCareLink Patient Monitor (Update A)
Successful exploitation of these vulnerabilities could lead to system compromise, unauthorized access to sensitive data, and manipulation of the monitor's functionality.
first Jul 24, 2025 -
High max 8.7
Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet Module (Update A)
Successful exploitation of these vulnerabilities could allow a remote attacker to cause a denial-of-service condition on the affected products by continuously sending UDP packets to the products.
first Mar 3, 2026 -
High max 7.3ICSA-26-127-01 1 CVE
MAXHUB Pivot client application
Successful exploitation of this vulnerability may enable an attacker to access tenant email addresses and associated information in cleartext or cause a denial-of-service condition.
-
High max 8.1
Schneider Electric EcoStruxure Control Expert, Process Expert, Modicon M340, M580 and M580 CPU (Update A)
Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure™ Control Expert, Modicon M340, Momentum, MC80, M580 and M580 CPU Safety. The Modicon M580 are PAC and Safety PLCs with built-in Ethernet for process, high availability & safety solutio…
first Jan 10, 2023 -
High max 8.6
Hitachi Energy MSM (Update A)
Hitachi Energy has assessed public reports of vulnerabilities initially believed to affect certain versions of the MSM product. Following further technical analysis and validation, Hitachi Energy has determined that the previously referenced product versions …
first Oct 29, 2024 -
Medium max 6.8
ABB B&R Automation Runtime
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. An attacker who successfully exploited this vulnerability could cause the product to stop.
first Jan 19, 2026 -
High max 7.4
ABB B&R Automation Studio
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. Successful exploitation of this vulnerability may enable an attacker to masquerade as a trusted party when B&R …
first Jan 19, 2026 -
Medium max 5.0
ABB B&R PVI
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. An attacker who successfully exploited this vulnerability could read sensitive informatio…
first Jan 29, 2026 -
High max 8.4ICSA-26-125-05 1 CVE
Johnson Controls CEM AC2000
Successful exploitation of this vulnerability could allow a standard user to escalate privileges on the host machine.
-
Critical max 9.6
ABB Edgenius Management Portal
ABB identified a critical vulnerability present in ABB Ability Edgenius starting from version 3.2.0.0. We have not received any reports of this vulnerability being exploited. An unauthenticated attacker could exploit this vulnerability to: → install and run a…
first Nov 20, 2025 -
High max 8.1
ABB Ability OPTIMAX
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory, if the optional integration with Azure Active Directory for Single-Sign On is enabled. We have not received any reports of this vulnerability being exploited…
first Jan 16, 2026 -
High max 8.3
ABB AWIN Gateways
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves the reported vulnerabilities. AWIN gateways are not intended to be internet-facing. An attacker who successfully exploited this…
first Mar 13, 2026 -
Medium max 6.5
ABB System 800xA, Symphony Plus IEC 61850
This vulnerability was privately reported relating to ABB’s implementation of the IEC 61850 communication stack for MMS client applications used in some Automation control system products. Note: IEC 61850 communication typically supports MMS and GOOSE protoco…
first Apr 13, 2026 -
High max 8.8
ABB Ability Symphony Plus Engineering
ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+…
first Apr 13, 2026 -
High max 7.2VA-26-119-02 2 CVEs
TP-Link WR841N Router multiple vulnerabilities
Multiple TP-Link products (TP-Link Archer C20 V5, Archer C20 6.0, Archer AX53 v1.0 and TL-WR841N v13) are affected by multiple vulnerabilities. The most severe of these vulnerabilities could allow an adjacent, unauthenticated attacker to execute administrativ…
-
High max 7.5VA-26-119-01 1 CVE
CryptPad unbounded WebSocket frame flood
CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance.
-
Medium max 5.5ICSA-26-118-01 1 CVE
NSA GRASSMARLIN
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information.
-
Critical max 7.5
Schneider Electric Modicon Controllers (Update A)
Schneider Electric is aware of multiple vulnerabilities in its Modicon Controller products. The [Modicon Programmable Automation controllers](https://www.se.com/ww/en/product-subcategory/3950-pac-programmable-automation-controllers/) are used for complex netw…
first May 14, 2019 -
High max 7.3ICSA-26-113-01 1 CVE
Yadea T5 Electric Bicycle
Successful exploitation of this vulnerability could result in an attacker being able to unlock and start the bicycle, leading to vehicle theft.
-
Critical max 9.4ICSA-26-113-02 1 CVE
Carlson Software VASCO-B GNSS Receiver
Successful exploitation of this vulnerability could enable a remote attacker to alter critical system functions or disrupt device operation.
-
Critical max 9.8ICSA-26-113-03 5 CVEs
Milesight Cameras
Successful exploitation of these vulnerabilities could crash the device being accessed or allow remote code execution.
-
High max 8.7ICSA-26-113-04 2 CVEs
SpiceJet Online Booking System
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information.
-
Critical max 9.8ICSA-26-113-05 1 CVE
Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera
Successful exploitation of this vulnerability could allow an attacker to bypass authentication and have remote access to sensitive information on the device.
-
Critical max 9.8ICSA-26-113-06 1 CVE
Intrado 911 Emergency Gateway (EGW)
Successful exploitation of this vulnerability could allow an attacker to read, modify, or delete files.
-
Medium max 5.4
Zscaler Client Connector hard-coded proxy configuration domain
Zscaler Client Connector 4.7 and 4.8 on Microsoft Windows misspell a domain that is added by default to an internal bypass list. This could lead to a limited amount of traffic from being inspected under specific circumstances.
first Apr 2, 2026 -
Medium max 6.6
Siemens TPM 2.0
The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and …
first Apr 14, 2026 -
High max 8.8
Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary
RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) contains a vulnerability that could allow an attacker to escalate their own privileges. Siemens has released a new version for RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) and recommends to …
first Apr 14, 2026 -
High max 7.3
Siemens SINEC NMS
Siemens SINEC NMS when used with User Management Component (UMC) contains an authentication bypass vulnerability due to insufficient validation of user identity. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorize…
first Apr 14, 2026 -
Low max 3.7
Siemens Analytics Toolkit
Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products a…
first Apr 14, 2026