4,100 results · Feed
-
High max 8.7ICSA-26-197-08 1 CVE
Rockwell Automation Flex 5000 Adapter
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected product.
-
Medium max 8.4ICSA-26-197-09 1 CVE
Rockwell Automation FactoryTalk DataMosaix
Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious scripts on the server.
-
Medium max 6.4
Inductive Automation Ignition (Update A)
Successful exploitation of this vulnerability could allow an attacker to be granted direct SYSTEM-level code execution on the host operating system running the Ignition Gateway service on Windows systems.
first Dec 18, 2025 -
Critical max 9.9
ABB T-MAC Plus
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves the reported vulnerabilities. An attacker who successfully exploited any of these vulnerabilities could potentially compromise …
first Jun 3, 2026 -
Medium max 4.4
ABB Advant Master Online Builder
ABB became aware of vulnerability in the products versions listed as affected in the advisory, where an incorrect version of Online Builder (ONB) was included in the media. An update is available that resolves the vulnerability, see details in Recommended imm…
first Jun 23, 2026 -
High max 7.8
ABB Ability Edgenius
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
first Jun 25, 2026 -
Critical max 10.0ICSA-26-195-04 1 CVE
Rockwell Automation 1715-AENTR EtherNet/IP Adapter
Successful exploitation of this vulnerability could allow an attacker to read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.
-
High max 7.2VA-26-190-01 1 CVE
LibreBooking path traversal
LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code.
-
Medium max 5.3VA-26-190-02 1 CVE
Superior Court of California Hearing Reminder Service unauthenticated information disclosure
The Hearing Reminder Service for the Superior Court of California at https://www.hrs.courts.ca.gov exposes an API endpoint that returns sensitive court reminder records without authentication.
-
High max 8.8VA-26-190-03 1 CVE
Allwinner TV Box TV98 ADB exposed on network
Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.
-
Medium max 6.5
Siemens Industrial Products
Several industrial products contain an out of bounds read vulnerability that could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel, leading to denial of service condition. Siemens has released new versions for s…
first May 14, 2024 -
Critical max 9.0
Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC
This advisory documents the impact of CVE-2024-3596 (also dubbed "Blastradius"), a vulnerability in the RADIUS protocol, to SCALANCE, RUGGEDCOM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the…
first Jul 9, 2024 -
Critical max 9.1
Siemens RUGGEDCOM APE1808 Devices
Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens is preparing fix versions and recommends to consult and implement the workarounds provided in Fortinet's upstream security n…
first May 13, 2025 -
High max 8.9
Siemens RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to upda…
first Jan 13, 2026 -
Medium max 6.9
Schneider Electric PowerChute Serial Shutdown
Schneider Electric is aware of vulnerabilities in its PowerChute™ Serial Shutdown product. The [PowerChute Serial Shutdown](https://www.se.com/ww/en/product-range/137943580-powerchute-serial-shutdown/#products) product is a UPS management software enabling gr…
first Apr 14, 2026 -
Medium max 6.9
Schneider Electric Easergy MiCOM Px40 Series
Schneider Electric is aware of a vulnerability in its Easergy MiCOM Px40 Series products. The [Easergy MiCOM Px40](https://www.se.com/ww/en/product-subcategory/4725-easergy-micom-px40-series/?filter=business-6-medium-voltage-distribution-and-grid-automation) …
first Apr 14, 2026 -
Critical max 9.9ICSA-26-190-01 1 CVE
OpenPLC v3
Successful exploitation of this vulnerability could allow an authenticated attacker to write arbitrary files to the filesystem and escalate this into arbitrary native code execution through the normal OpenPLC program compilation process, potentially resulting…
-
Critical max 9.0
Siemens SIPROTEC and SICAM
This advisory documents the impact of CVE-2024-3596 (also dubbed "Blastradius"), a vulnerability in the RADIUS protocol, to SIPROTEC, SICAM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the RAD…
first May 13, 2025 -
High max 8.2
Siemens Engineering Platforms
Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arb…
first Aug 12, 2025 -
Critical max 9.8
Siemens User Management Component (UMC)
Siemens' User Management Component (UMC) is affected by multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. Siemens has released a new version for User Management Co…
first Sep 9, 2025 -
Critical max 9.8
Siemens SINEC OS
SINEC OS before V4.0 contains multiple vulnerabilities. Siemens has released a new version for RUGGEDCOM RST2428P and recommends to update to the latest version.
first Jun 2, 2026 -
High max 7.0
Hitachi Energy PROMOD V
Hitachi Energy is aware of insecure HTTP transmission vulnerability in PROMOD V product versions listed in this document. This vulnerability could allow attackers to intercept or manipulate sensitive data in transit, potentially leading to credential theft, s…
first Jun 30, 2026 -
High max 8.1
Hitachi Energy e-mesh EMS
Hitachi Energy is aware of a buffer overflow vulnerability that affects e-mesh EMS product versions listed in this document. Successful exploitation of this vulnerability could lead to a buffer overflow condition, potentially resulting in application outages …
first Jun 30, 2026 -
Medium max 5.4
Siemens Mendix Studio Pro
Mendix Studio Pro versions before V11.12 are affected by a file parsing vulnerability that could be triggered when the application reads specially crafted malicious project during the build pipeline. This could allow an attacker to execute arbitrary code in t…
first Jun 30, 2026 -
Critical max 9.8ICSA-26-188-01 3 CVEs
Hydro-Québec Le Circuit Electrique charging station backend
Successful exploitation of these vulnerabilities could lead to privilege escalation, or result in a denial-of-service attack.
-
High max 8.4ICSA-26-188-06 3 CVEs
Labcenter Proteus 9
Successful exploitation of these vulnerabilities could disclose information and allow a malicious user to execute arbitrary code on affected installations.
-
Medium max 5.9ICSA-26-188-07 2 CVEs
Digi International PortServer TS, Digi One SP IA
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and gain access to restricted resources, obtain credentials, and inject malicious scripts.
-
High max 7.1VA-26-188-01 1 CVE
FluxInk Color Management Driver local privilege escalation
An attacker with a standard user account on a device could escalate their privileges via arbitrary physical memory mapping at \Device\PhysicalMemory.
-
Medium max 5.9
Mitsubishi Electric CNC Series (Update D)
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial of service (DoS) condition in Mitsubishi Electric CNC Series by sending specially crafted packets to TCP port 683, causing an emergency stop.
first Oct 17, 2024 -
Critical max 9.8
WHILL Model C2 Electric Wheelchairs and Model F Power Chairs (Update B)
Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to take control over the product.
first Dec 30, 2025 -
High max 7.5
Siemens SIMATIC and SIPLUS products
Siemens ET 200 devices contain a denial-of-service vulnerability that could be triggered by sending a valid S7 protocol Disconnect Request (COTP DR TPDU), causing the device to become unresponsive and require a power cycle to recover. Siemens has released new…
first Jan 13, 2026 -
High max 7.8
Siemens Simcenter Femap
Simcenter Femap is affected by file parsing vulnerabilities in Datakit library and Parasolid Translator Component that could be triggered when the application reads files in IPT or IGS format. If a user is tricked to open a malicious file with the affected ap…
first May 12, 2026 -
Critical max 8.7
Siemens RUGGEDCOM APE1808 Devices
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where f…
first May 12, 2026 -
Medium max 3.3ICSA-26-183-02 1 CVE
CubeSpace CW0057 Reaction Wheel
Successful exploitation of this vulnerability could allow an attacker to upload arbitrary malicious firmware to the device.
-
Critical max 9.8
Gardyn Home Kit (Update B)
Successful exploitation of these vulnerabilities could allow unauthenticated users to access and control edge devices, access cloud-based devices and user information without authentication, and pivot to other edge devices managed in the Gardyn cloud environm…
first Feb 24, 2026 -
Critical max 10.0ICSA-26-183-03 3 CVEs
Gardyn IoT Hub
Successful exploitation of these vulnerabilities could allow unauthenticated users to access and control IoT Hub managed devices.
-
Medium max 7.1
Schneider Electric EcoStruxure IT Data Center Expert
Schneider Electric is aware of a vulnerability in its EcoStruxure™ IT Data Center Expert. The EcoStruxure™ IT Data Center Expert product is a scalable monitoring software that collects, organizes, and distributes critical device information providing a compre…
first Jun 9, 2026 -
High max 8.7
XZ Utils vulnerability impacting B&R Products
An update is available that resolves vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or corrupt memory data.
first Jun 10, 2026 -
High max 7.0ICSA-26-181-01 4 CVEs
Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M
Successful exploitation of these vulnerabilities could allow a local attacker to tamper with or destroy information in the affected product, cause a denial-of-service condition in the affected product, or execute arbitrary code when a specially crafted archiv…
-
High max 7.5ICSA-26-181-02 1 CVE
Frangoteam FUXA SCADA/HMI
Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to enumerate all user accounts and role assignments on a FUXA SCADA/HMI instance.