4,097 results · Feed
-
High max 9.1
Wärtsilä FOS-Onboard (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to deliver an unauthorized update, execute code, or extract credentials to allow the attacker to impersonate a privileged client.
first Sep 15, 2026 -
High max 8.8ICSA-26-267-01 14 CVEs
Botslab G980H Dashcams
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication controls, gain unauthorized access to sensitive data and privileged device functionality, modify device configuration, disrupt device operation.
-
High max 7.2
Plex Media Server
Plex Media Server before 1.43.3.10861 contains multiple vulnerabilities. In the worst case, a remote attacker could steal a legitimate user's account credentials and eventually write arbitrary files or execute code.
-
Critical max 9.0
Siemens Siveillance Control
A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability allows an attacker to upload arbitrary files, which can lead …
first Sep 8, 2026 -
High max 7.8
Siemens SIPLUS and SIMATIC Products
Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific count…
first Sep 8, 2026 -
High max 8.2
Siemens Desigo CC family
A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics co…
first Sep 8, 2026 -
Critical max 9.1
Siemens Industrial Edge Management
Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification. Siemens has released new versi…
first Sep 8, 2026 -
High max 8.6
Siemens SIMOVE Fleetmanager and SIPLANT
SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Sep 8, 2026 -
Medium max 6.5
Siemens WTV676 and WTV776
The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices. Siemens has released …
first Sep 16, 2026 -
Critical max 9.8ICSA-26-265-01 1 CVE
lwIP TCP/IP Stack MQTT Client Application
Successful exploitation of this vulnerability could allow an attacker to gain full code execution on the device.
-
High max 8.8ICSA-26-265-02 1 CVE
lwIP (Lightweight IP)
Successful exploitation of this vulnerability could result in a system crash, a DoS, or memory corruption, which could lead to code execution on the victim system.
-
Medium max 6.1ICSA-26-265-09 1 CVE
OpenPLC Runtime v3
Successful exploitation of this vulnerability could allow an attacker to hijack session cookies and issue state-changing requests as an operator which would allow the attacker to control the programmable logic controller and the physical processes it drives.
-
Critical max 9.8VA-26-260-01 2 CVEs
FatPipe software multiple vulnerabilities
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon and a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attac…
-
High max 7.5
Schneider Electric Modicon M340 Controller and Communication Modules
Schneider Electric is aware of a vulnerability in its Modicon M340 https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-envi…
first Aug 12, 2025 -
High max 7.8
ABB Ability Edgenius
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
first Jun 25, 2026 -
Critical max 8.8
Hitachi Energy FACTS Control Platform (FCP)
Hitachi Energy is aware of vulnerabilities that affect the FACTS Control systems with GWS component listed in this document. An attacker exploiting these vulnerabilities can cause impact on confidentiality, integrity and availability of the product. Following…
first Jul 28, 2026 -
Medium max 7.3
Schneider Electric NetBotz 5 750/755
Schneider Electric is aware of multiple vulnerabilities in its NetBotz 5 – 750/755 products.The NetBotz 5 – 750/755 products are security and environmental monitors providing temperature, humidity, leak, smoke, vibration, door contact, and video monitoring ca…
first Aug 11, 2026 -
Medium max 6.9
Schneider Electric PowerChute Serial Shutdown
Schneider Electric is aware of vulnerabilities in its PowerChute™ Serial Shutdown product. The PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktops, servers and works…
first Aug 11, 2026 -
High max 9.2
Mitsubishi Electric GX Works3 and Motion Control Settings
Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker t…
-
High max 7.5ICSA-26-260-01 3 CVEs
Bransys ELD
Successful exploitation of these vulnerabilities could allow unauthorized access to telemetry data and firmware.
-
Medium max 4.0VA-26-258-01 1 CVE
Newell Brands DYMO Connect Desktop improper file path validation
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope.
-
High max 8.2
Siemens SIMATIC IPC Family, ITP1000, and Field PGs
Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations. Siemens has released new versions of BIOS for severa…
first Mar 11, 2025 -
High max 7.8
Siemens SCALANCE LPE9403
SCALANCE LPE9403 is affected by multiple vulnerabilities which lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. Siemens recommends spec…
first May 13, 2025 -
High max 8.2
Siemens IAM Client
WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products. Siemens has relea…
first Aug 12, 2025 -
High max 7.8
Siemens Web Installer
The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulne…
first Aug 12, 2025 -
High max 8.8
Siemens Products using OpenSSL
OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends t…
first Jun 9, 2026 -
High max 7.2
Siemens SICAM 8
Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 - SICAM EGS Device firmware - CPCI85 - SICAM S8000 - SICOR…
first Jul 9, 2026 -
Critical max 9.8
Siemens Reyrolle 7SR5
Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities. Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version.
first Sep 8, 2026 -
Medium max 6.1
Siemens Teamcenter
A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation …
first Sep 8, 2026 -
Medium max 5.9
Schneider Electric SCADAPack x70 Products
Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. The SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R and SCADAPack 57x products are Remote Terminal Units that provide communication capabilities for remote monitoring …
first Sep 8, 2026 -
Critical max 9.6ICSA-26-258-01 6 CVEs
Digital Watchdog VMAX DVR and NVR Product Lineups
Successful exploitation of these vulnerabilities could grant full administrative control of the device, allowing an attacker to view live and recorded surveillance, alter device configurations, and use the device as a network pivot point.
-
Critical max 9.8ICSA-26-258-03 2 CVEs
mySCADA myPRO Manager
Successful exploitation of these vulnerabilities could allow an attacker to access privileged management functions or send arbitrary SMS messages through the connected GSM modem.
-
High max 9.8ICSA-26-258-08 7 CVEs
CareCam CM2507
Successful exploitation of these vulnerabilities could allow an attacker to access live video and sensitive device information, enable unauthorized services, execute arbitrary code, modify device operation, and recover stored credentials.
-
High max 8.8
ST Engineering iDirect iQ-Series Terminals (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition.
first Jul 2, 2026 -
High max 8.4ICSA-26-253-01 4 CVEs
AVEVA Pipeline Integrity Monitor
Successful exploitation of these vulnerabilities could allow an attacker to disclose information, brute-force hashes, or run arbitrary code in a browser session.
-
High max 8.3ICSMA-26-253-01 3 CVEs
NextGen Healthcare Mirth Connect
Successful exploitation of these vulnerabilities could allow an attacker to exfiltrate date or cause a denial-of-service condition.
-
High max 8.1ICSMA-26-253-02 1 CVE
Orthanc DICOM Server
Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-serv…
-
Critical max 9.6
IXON VPN Client
Successful exploitation of this vulnerability could allow an attacker to perform remote code execution on the computer running the client with elevated privileges.
first Aug 5, 2026 -
High max 8.6
Rockwell Automation Historian ME
Successful exploitation of these vulnerabilities could crash the device being accessed; an out-of-bounds write condition may allow remote code execution.
first Sep 1, 2026 -
High max 7.1VA-26-251-02 1 CVE
Waves Central local privilege escalation via Improper XPC Client Authentication in macOS
Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller …