4,100 results · Feed
-
Critical max 10.0ICSA-26-181-06 5 CVEs
StoneFly Storage Concentrator
Successful exploitation of these vulnerabilities could allow attackers to gain broad unauthorized access, execute arbitrary commands with root privileges, steal sensitive data, and perform actions on behalf of legitimate users across interconnected systems.
-
Critical max 9.3ICSA-26-181-07 2 CVEs
Delta Electronics DVP12SE PLC
Successful exploitation of these vulnerabilities could allow an attacker to remotely issue commands, modify operational values, interfere with control logic, and alter device behavior without authentication or privilege enforcement.
-
Critical max 9.8ICSMA-26-181-01 5 CVEs
OFFIS DCMTK Toolkit
Successful exploitation of these vulnerabilities could allow an attacker to write files, access unauthorized information, exhaust memory, or crash affected DCMTK client or server processes.
-
High max 8.1VA-26-177-01 1 CVE
extract-zip unvalidated symlink path traversal
extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to p…
-
High max 8.7
Schneider Electric PowerLogic P7
Schneider Electric is aware of a vulnerability in its PowerLogic™ P7 product. The PowerLogic™ P7 is a protection and control platform designed for complex and advanced electrical network applications. Failure to apply the remediation provided below may risk u…
first Jun 9, 2026 -
High max 8.7
Schneider Electric EasyLogic T150 and Saitel DP RTU
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-select…
first Jun 9, 2026 -
High max 8.4
AzeoTech DAQFactory (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious .ctl files that may lead to arbitrary code execution.
first Jun 18, 2026 -
High max 8.2ICSA-26-176-01 1 CVE
Yokogawa FAST/TOOLS and CI Server
Successful exploitation of this vulnerability may return a response containing the CI Server setting information.
-
High max 8.4ICSA-26-176-03 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could allow a local attacker to disclose information and execute arbitrary code.
-
High max 9.8ICSA-26-176-04 3 CVEs
Daktronics Controller Firmware
Successful exploitation of these vulnerabilities could could provide an unauthenticated user with complete root-level access and control of the system.
-
High max 7.2ICSA-26-176-05 2 CVEs
H.VIEW HV-500S6 IP Camera
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code and upload malicious files to the affected device.
-
High max 8.4ICSA-26-176-06 1 CVE
Delta Electronics DTM Soft
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
Critical max 9.1ICSMA-26-176-01 1 CVE
pydicom pynetdicom Library
Successful exploitation of this vulnerability could allow an unauthenticated attacker to write to arbitrary file paths.
-
High max 8.2ICSMA-26-176-02 1 CVE
OHIF Viewers DICOM
Successful exploitation of this vulnerability in a custom integration version could allow an attacker to steal an authenticated clinician's token via a crafted link.
-
Critical max 9.4ICSA-26-176-02 4 CVEs
EVoke Systems Charging Station Management System
Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.
-
High max 8.5
Rockwell Automation Arena (Update C)
Successful exploitation of these vulnerabilities could result in execution of arbitrary code.
first Dec 10, 2024 -
High max 7.4
Brightpick Mission Control / Internal Logic Control (Update A)
Successful exploitation of these vulnerabilities could result in the exposure of sensitive information and the manipulation of critical functions by an attacker.
first Nov 13, 2025 -
Medium max 6.4
Zero Motorcycles Firmware (Update A)
Successful exploitation of this vulnerability could allow an attacker to pair via Bluetooth with a motorcycle, gaining unauthorized access to all Bluetooth functions, including changing the firmware.
first Apr 21, 2026 -
High max 7.1
Siemens WinCC Certificate Manager
WinCC Certificate Manager insufficiently protects key material that could allow an attacker to extract sensitive information. Siemens has released a new version for SIMATIC WinCC Unified PC Runtime V21 and recommends to update to the latest version. Siemens r…
first Jun 9, 2026 -
Medium max 6.1
Siemens SIPROTEC 5 Using DIGSI5 Protocol
SIPROTEC 5 is vulnerable to arbitrary file uploads by authenticated users using the DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, potentially causing a permanent denial of service condition. As a mitigation measure, u…
first Jun 9, 2026 -
High max 8.8
Siemens SINEC INS
SINEC INS before V1.0 SP2 Update 6 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
first Jun 9, 2026 -
Medium max 6.6
ABB Freelance Security Lock
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or make the product inaccessible.
first Jun 10, 2026 -
High max 8.8
Impact of Linux Kernel vulnerabilities on B&R products
B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the af…
first Jun 11, 2026 -
High max 7.5ICSA-26-174-07 1 CVE
Hubbell Aclara Metrum Cellular Web Interface
Successful exploitation of this vulnerability could allow attackers to manipulate critical device settings and repeatedly disrupt operations, potentially causing a loss of communications to the device.
-
Critical max 9.8VA-26-169-01 4 CVEs
U.S. GAO EPDS and CBCA EDS multiple vulnerabilities
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) contained multiple vulnerabilities. In the worst case, a remote, unauthenticated attacke…
-
High max 7.1
Schneider Electric EasyLogic T150 and Saitel DP
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-select…
first May 12, 2026 -
High max 8.7
Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition in the affected product by rapidly establishing a large number of TCP connections to it, resulting in an inconsistency in the product's in…
-
High max 8.7
Mitsubishi Electric Co.'s MELSEC iQ-F Series FX5-ENET/IP Ethernet Module
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition in the affected product by continuously sending a large number of communication packets to the Ethernet port of the product in a short per…
-
Critical max 9.8ICSA-26-169-01 1 CVE
AVer PTC cameras
Successful exploitation of this vulnerability could allow arbitrary code execution.
-
High max 9.2ICSA-26-169-03 3 CVEs
Rockwell Automation FactoryTalk Historian Site Edition
Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system.
-
Medium max 6.5ICSMA-26-169-01 2 CVEs
Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive health-related information and prevent legitimate users from establishing a connection with the device.
-
High max 7.4VA-26-168-01 1 CVE
ServerCo getssl ACME shell script path injection
In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-file handling, allowing a maliciously crafted token to influence local path/filename usage du…
-
High max 8.3ICSA-26-167-01 1 CVE
Rockwell Automation FactoryTalk Analytics PavilionX
Successful exploitation of this vulnerability could result in an attacker executing privileged operations.
-
High max 7.5ICSA-26-167-02 1 CVE
RSLinx Classic Third-Party Vulnerability
Successful exploitation of this vulnerability can lead to a denial of service, where the application will become unresponsive and will not recover on its own.
-
High max 8.7ICSA-26-167-03 1 CVE
Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP
Successful exploitation of this vulnerability could cause a denial-of-service condition that may result in a major nonrecoverable fault (MNRF).
-
High max 8.7ICSA-26-167-04 2 CVEs
Rockwell Automation CompactLogix
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
-
Critical max 8.8ICSA-26-167-05 2 CVEs
Rockwell Automation FLEX I/O EtherNet/IP Adapters
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, account takeover, and cause loss of availability.
-
Medium max 5.5
Schneider Electric Uni-Telway Driver (Update D)
Schneider Electric is aware of a vulnerability in its [Uni-Telway driver](https://www.se.com/us/en/product-range/573-unitelway/#overview) which is part of [EcoStruxure™ Control Expert](https://www.se.com/ww/en/product-range/548-ecostruxure-control-expert-unit…
first Feb 11, 2025 -
Critical max 9.8ICSA-26-162-01 2 CVEs
Yarbo Android/iOS Mobile Application and Cloud Infrastructure
Successful exploitation of these vulnerabilities could allow an attacker to obtain hard-coded credentials, gain access to telemetry data, and potentially send operational commands to the robot fleet.
-
Critical max 9.8ICSA-26-162-02 7 CVEs
Naxclow IoT Platform
Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, intercept or manipulate communications, harvest sensitive credentials at scale, or gain unauthorized access.