| 2026-10-06 | CVE-2026-94293 | Murrelektronik AAS Edge Client All Versions Allow Unauthenticated Remote Attacker to Read and Modify Asset Administration Shell Submodel Data | 9.8 Critical | Updated |
| 2026-10-04 | CVE-2026-86060 | MikroTik RouterOS's Argument Injection in a Command-Processing Component Allows Unauthenticated Attackers to Execute Arbitrary Commands on the Router; CISA's September 13th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-10-04 | CVE-2026-85102 | Check Point Firewall Certificate Validation Bypass Across Site-to-Site and Remote Access VPN Carries a Lapsed September 25th CISA KEV Requirement for Covered Entities | 9.8 Critical | KEV |
| 2026-10-04 | CVE-2026-82078 | PaperCut NG/MF's Unsafe Reflection Allows Remote Attackers to Manipulate Class Loading and Execute Arbitrary Code on the Print Management Server; CISA's September 14th KEV Deadline Has Passed | 9.1 Critical | KEV |
| 2026-10-04 | CVE-2026-67276 | MikroTik RouterOS SSH Key Comparison Omits RSA Exponent, Letting an Attacker with a Known Modulus Authenticate as Another User | 8.1 High | EPSS-Imminent |
| 2026-10-03 | CVE-2026-76504 | CISA's October 3rd KEV Remediation Deadline for Cisco Catalyst SD-WAN Manager URI Encoding Bypass Has Passed; Covered Entities Still Exposed Are Out of Compliance | 9.8 Critical | KEV |
| 2026-10-02 | CVE-2026-86326 | Moxa MGate MB3170 Series Security Vulnerability Exploitable by Authenticated Admin Network Attackers (CVSS 8.6) | 8.6 High | Updated |
| 2026-10-02 | CVE-2026-86325 | Moxa MGate MB3170 Series Buffer Overflow Exploitable by Low-Privilege Network Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-84411 | MikroTik RouterOS Remote Code Execution Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-10-02 | CVE-2026-75937 | Digi International IX Family Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-71452 | Johnson Controls EasyIO FS32 Command Injection Exploitable by Authenticated Admin Adjacent-Network Attackers (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-71449 | Johnson Controls EasyIO FS32 Security Vulnerability Reachable Without Authentication at CVSS 9.3 | 9.3 Critical | Updated |
| 2026-10-02 | CVE-2026-64893 | Johnson Controls EasyIO NEO Security Vulnerability Exploitable by Low-Privilege Network (High-Complexity Exploit) Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-02 | CVE-2026-55396 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 8.5) | 8.5 High | Updated |
| 2026-10-02 | CVE-2026-55395 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-55393 | Teledyne FLIR Aware2 Path Traversal Reachable Without Authentication at CVSS 10.0 | 10.0 Critical | Updated |
| 2026-10-02 | CVE-2026-34494 | Johnson Controls Neo Series MVP2 Unauthenticated Security Vulnerability over Network (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-34493 | Johnson Controls EasyIO FS32 Unauthenticated Security Vulnerability over Network (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-14984 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-14983 | Teledyne FLIR Aware2 Denial of Service Reachable by Adjacent Unauthenticated Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-02 | CVE-2026-104286 | Fortinet FortiMail Unauthenticated Arbitrary File Write via Path Traversal Carries an October 4th CISA KEV Federal Remediation Requirement for Covered Entities | 9.8 Critical | KEV |
| 2026-10-02 | CVE-2026-102490 | Zammad Local Privilege Escalation to Root via Improper Privilege Management Carries an October 5th CISA KEV Federal Deadline for Covered Organizations | 9.8 Critical | KEV |
| 2026-10-02 | CVE-2026-102489 | Zammad Session Fixation Enabling Remote Code Execution as the Zammad User Carries an October 5th CISA KEV Federal Deadline for Covered Organizations | 9.8 Critical | KEV |
| 2026-10-01 | CVE-2026-8037 | Progress LoadMaster's Command Injection Flaw Allows Unauthenticated Remote Attackers to Execute Arbitrary OS Commands on the Load Balancer Appliance; CISA's August 10th KEV Deadline Has Passed | 9.6 Critical | KEV |
| 2026-10-01 | CVE-2026-48710 | Kludex Starlette's HTTP Request Smuggling Vulnerability Allows Network-Adjacent Attackers to Bypass Security Controls and Poison Shared HTTP Connections | 6.5 Medium | KEV |
| 2026-10-01 | CVE-2025-41753 | WAGO 0751-9x01 Security Vulnerability Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-30 | CVE-2026-91191 | Lantronix G520 Boot Process Disables Firmware Signature Verification, Allowing Unauthorized Software to Pass as Authentic | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-84409 | Lantronix G520 Management Interface Returns Metadata Fetched Over Unencrypted HTTP, Enabling Man-in-the-Middle Attacks on Update Mechanism | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-79625 | CODESYS Runtime Monitoring Race Condition Under Concurrent Client Requests Risks Incorrect Reads, Writes, and Data Corruption | 8.1 High | Updated |
| 2026-09-30 | CVE-2026-76992 | CODESYS Gateway Client Allocates Unbounded Memory from Server-Controlled Size Field, Enabling Unauthenticated Remote Denial of Service | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-41940 | WebPros cPanel and WHM's Login Flow Authentication Bypass Gives Unauthenticated Attackers Unauthorized Access to the Control Panel; CISA's May 3rd KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-30 | CVE-2025-53844 | Siemens RUGGEDCOM APE1808 FortiOS Out-of-Bounds Write in Specific Versions Allows Attacker to Execute Unauthorized Code | 8.8 High | Updated |
| 2026-09-30 | CVE-2025-14272 | Rockwell Automation FactoryTalk PavilionX API Improper Authorization Allows Unauthenticated Actors to Execute Privileged Operations | 8.3 High | Updated |
| 2026-09-30 | CVE-2025-13036 | Rockwell Automation FactoryTalk Historian SE Login Endpoint Race Condition Allows Unauthenticated Authentication Token Harvest | 9.2 Critical | Updated |
| 2026-09-30 | CVE-2025-12659 | Siemens Simcenter Femap Memory Corruption on Parsing Specially Crafted IPT Files Enables Code Execution in Current Process | 7.8 High | Updated |
| 2026-09-30 | CVE-2025-11694 | Rockwell Automation 1769 CompactLogix Missing CIP Protocol Sequence Number Validation Enables Denial of Service by Network Attacker | 8.7 High | Updated |
| 2026-09-29 | CVE-2026-8066 | Hitachi Energy RTU500 End-of-Life Firmware Directory Traversal via File Upload Allows Unauthenticated Attacker to Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-29 | CVE-2026-8065 | Hitachi Energy RTU500 End-of-Life Firmware Update Endpoint Bypasses Authentication, Allowing Unauthenticated Arbitrary Firmware Upload | 9.1 Critical | Updated |
| 2026-09-29 | CVE-2026-7395 | Hitachi Energy Asset Suite Exposes Configuration Upload Servlet to Unauthenticated Users Without Network Restrictions | 8.5 High | Updated |
| 2026-09-29 | CVE-2025-7639 | AVEVA Enterprise SCADA Authenticated Operator Can Tamper Serialized Data to Achieve Code Execution Under DNA Apps Security Privileges | 7.1 High | Updated |
| 2026-09-29 | CVE-2025-41770 | Phoenix Contact AXC F PLC PLCnext Engineer Communication Interface Unauthenticated Denial-of-Service Vulnerability | 7.5 High | Updated |
| 2026-09-29 | CVE-2025-41769 | Phoenix Contact AXC F PLC PROFINET Service Buffer Overflow in Default Configuration Allows Unauthenticated Remote Reboot | 9.8 Critical | Updated |
| 2026-09-29 | CVE-2025-12012 | Rockwell Automation CompactLogix and ControlLogix 5370/5570 Can Be Forced into Non-Recoverable Fault via Invalid Project File Write | 9.2 Critical | Updated |
| 2026-09-29 | CVE-2025-12011 | Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Can Be Forced into Non-Recoverable Fault by Invalid Project File Write | 9.2 Critical | Updated |
| 2026-09-29 | CVE-2025-11698 | Rockwell Automation 5380/5480/5580 Controller Boot Firmware Below Version 1.072 Allows Invalid File Writes That Force Non-Recoverable Device Fault | 9.2 Critical | Updated |
| 2026-09-26 | CVE-2026-80152 | Lantronix SLC/EMG/SLB Web Management Services Endpoint Lets Authenticated Users Inject OS Commands as Root | 9.1 Critical | Updated |
| 2026-09-26 | CVE-2026-80151 | Lantronix SLC/EMG/SLB Web Management Services Endpoint Contains a Second Command Injection Path Allowing Root Execution by Authenticated Users | 9.1 Critical | Updated |
| 2026-09-26 | CVE-2026-80150 | Lantronix SLC8000/SLC9000/EMG/SLB882 WebSSH Listener Accepts Unauthenticated Server-Side Request Forgery Targets | 7.5 High | Updated |
| 2026-09-26 | CVE-2026-80149 | Lantronix WebSSH and WebTelnet Server-Side Request Forgery Lets Unauthenticated Attackers Redirect Device Requests to Internal Hosts | 8.6 High | Updated |
| 2026-09-26 | CVE-2026-80148 | Lantronix SLC/EMG/SLB882 WebSSH Listener Processes SSRF Probes From Unauthenticated Callers, Enabling Internal Network Mapping | 8.6 High | Updated |
| 2026-09-26 | CVE-2026-80146 | A Second Lantronix SLC/EMG/SLB Stack Buffer Overflow via Undocumented Interface Allows Authenticated Attackers to Execute Arbitrary Code | 9.9 Critical | Updated |
| 2026-09-26 | CVE-2026-67279 | MikroTik RouterOS Unauthenticated Session Bypass Carries Federal Remediation Deadline of September 28 | 6.5 Medium | KEV |
| 2026-09-26 | CVE-2023-45796 | Pilz PASvisu and PMI v8xx Stored Cross-Site Scripting in Runtime Component Exploitable by Low-Privilege Unauthenticated Remote Attacker | 8.1 High | Updated |
| 2026-09-26 | CVE-2023-45795 | Pilz PASvisu Builder Component Cross-Site Scripting Allows Local Unauthenticated Attacker to Gain Full Device Control | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93616 | Path Traversal Across Check Point Management and Log Server Infrastructure Missed the September 25th CISA KEV Window; Covered Organizations Are Now Out of Compliance | 9.8 Critical | KEV |
| 2026-09-25 | CVE-2026-85046 | Google Chromium V8's Type Confusion Allows Remote Attackers to Execute Arbitrary Code or Escape the Browser Sandbox via a Crafted Web Page | 8.8 High | KEV |
| 2026-09-25 | CVE-2026-81578 | PaperCut NG/MF's Missing Authentication on a Critical Function Allows Unauthenticated Attackers to Perform Administrative Actions Without Logging In; CISA's September 14th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-25 | CVE-2026-76461 | Cisco Secure Email Gateway's SQL Injection Flaw Allows Unauthenticated Attackers to Execute Arbitrary Database Queries and Compromise the Email Security Platform | 9.8 Critical | KEV |
| 2026-09-25 | CVE-2026-76460 | Cisco Identity Services Engine's Incorrect Use of Privileged APIs Allows Unauthenticated Remote Attackers to Gain Full Administrative Control; CISA's September 19th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-25 | CVE-2026-75650 | Adobe Commerce and Magento's Template Engine Injection Flaw Allows Unauthenticated Remote Attackers to Execute Arbitrary Server-Side Code on the E-Commerce Platform | 10.0 Critical | KEV |
| 2026-09-25 | CVE-2026-93345 | MikroTik RouterOS Labelled-VPN NLRI Iterator Accepts Below-Minimum Prefix Length in BGP UPDATE, Enabling On-Path Service Crash | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-67281 | MikroTik RouterOS WebFig Stale Session Pointer Lets Unauthenticated Attackers Read Arbitrary Files | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-67278 | MikroTik RouterOS Accepts Malformed RSA/PKCS#1 v1.5 Signatures Across TLS and SSH, and Its Trust Store Includes an e=3 Root CA, Letting a Network Attacker Forge Valid Signatures Without the Private Key | 9.1 Critical | Updated |
| 2026-09-25 | CVE-2026-5430 | WSO2 API Gateway Path Traversal Reaches Federal Remediation Deadline of September 27 | 10.0 Critical | KEV |
| 2026-09-25 | CVE-2026-33824 | Microsoft Windows IKE Service Extensions' Double Free Enables Unauthenticated Remote Attackers to Execute Arbitrary Code; CISA's August 21st KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-24 | CVE-2026-22619 | Eaton Intelligent Power Protector Uncontrolled Search Path Scores 7.8 | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-21662 | Critical Johnson Controls FMS Employee Unrestricted File Upload Scores 9.8 | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-89028 | MikroTik RouterOS SMB1 Session Setup Handler Accepts Crafted uniPwdLen That Corrupts Adjacent Heap Memory | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-89025 | Belden Hirschmann HiOS Switch Platform Missing HTTP Content Validation Allows Unauthenticated Attacker to Cause Web Server Denial of Service | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-85880 | Microsoft Windows' Heap-Based Buffer Overflow Allows Local Attackers to Escalate Privileges by Corrupting Heap Memory; CISA's September 22nd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-24 | CVE-2026-80156 | Lantronix SLC8000/SLC9000/EMG Series Web Upload Path Traversal Lets Authenticated Attackers Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-80155 | Lantronix SLC8000/SLC9000/EMG Series Web Upload Authentication Bypass Lets Unauthenticated Attackers Write Arbitrary Files | 10.0 Critical | Updated |
| 2026-09-24 | CVE-2026-80154 | All Lantronix SLC/EMG/SLB Firmware Versions Use Predictable Session Tokens, Letting Unauthenticated Attackers Hijack Active Sessions | 9.6 Critical | Updated |
| 2026-09-24 | CVE-2026-80147 | Lantronix SLC8000/SLC9000/EMG/SLB Stack Buffer Overflow via Undocumented Interface Allows Authenticated Attackers to Execute Arbitrary Code | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-80145 | Lantronix SLC8000/SLC9000/EMG Series Services Permission Allows Authenticated Command Injection as Root via a Distinct Injection Path | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-80144 | Lantronix SLC/EMG/SLB Undocumented Management Feature Lets Authenticated Attackers Execute Arbitrary Root Shell Commands | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-80143 | A Second Undocumented Lantronix SLC/EMG/SLB Command Path Lets Authenticated Attackers Execute Arbitrary Root Shell Commands | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-78312 | Delta DIAEnergie Path Traversal Allows Unauthenticated Attackers to Write or Overwrite Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-78311 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-78309 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-78308 | Delta DIAEnergie Authentication Bypass Vulnerability Allows Unauthenticated Access to Protected Functions | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-13249 | Honeywell PD45 Industrial Printer Web Management Interface Accepts Unauthenticated File Uploads That Enable Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-13248 | Honeywell PD45 Industrial Printer Intermec Fingerprint Interface Lets Authenticated Admin Accounts Write Arbitrary Files, Enabling Remote Code Execution | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-94127 | CISA's September 25th Remediation Deadline for F5 BIG-IP APM's OAuth Profile Heap Overflow Has Passed; Covered Entities Running Affected Virtual Servers Are Out of Compliance | 9.8 Critical | KEV |
| 2026-09-23 | CVE-2026-93952 | Arista VeloCloud Orchestrator Input Validation Gap Lets Remote Attackers Reach Privileged APIs; CISA's September 25th KEV Deadline for Covered Entities Has Now Passed | 10.0 Critical | KEV |
| 2026-09-23 | CVE-2026-82028 | absmach magistrala SQL Injection Reachable by Authenticated Remote Attackers with High Severity (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-73176 | Advantech EKI-1242IEIMS Firmware V1.06.01 Web Management Interface Command Injection Lets Authenticated Remote Attackers Execute OS Commands | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73175 | Advantech EKI-1242EIMS OPC UA Gateway Session Pool Exhaustion Lets Adjacent Unauthenticated Attackers Cause Complete Denial of Service | 7.1 High | Updated |
| 2026-09-23 | CVE-2026-73174 | Advantech EKI-1242EIMS edgserver Management Protocol Transmits Credentials in Cleartext, Exposing Them to Network-Adjacent Observers | 8.7 High | Updated |
| 2026-09-23 | CVE-2026-73173 | Advantech EKI-1242EIMS edgserver Management Protocol Exposes Critical Device Management Functions Without Authentication | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-73172 | Advantech EKI-1242EIMS edgserver Management Service Unauthenticated OS Command Injection Allows Remote Root Execution | 9.3 Critical | Updated |
| 2026-09-23 | CVE-2026-73171 | Advantech EKI-1242EIMS Backup-Restore Upload Lets Authenticated Remote Attackers Overwrite Arbitrary Device Filesystem Files | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73170 | Advantech EKI-1242EIMS Modbus CSV Import Executes Attacker-Controlled Lua Code via Crafted Upload | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73167 | Advantech EKI-1242IEIMS Web Management Interface Contains a Second OS Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73166 | Advantech EKI-1242IEIMS Web Management Interface Code Injection Lets Authenticated Remote Attackers Execute Arbitrary OS Commands | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73165 | Advantech EKI-1242IEIMS Web Management Interface Has a Third Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73164 | Advantech EKI-1242IEIMS Web Management Interface Contains a Fourth OS Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73163 | Advantech EKI-1242IEIMS Web Management Interface Authenticated Command Injection Allows Remote OS Command Execution via Web Interface | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-53985 | Ground Station Prior to 0.6.0 Socket.IO service_control Handler Allows Unauthenticated Peer to Force Service Shutdown | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-53984 | Ground Station Prior to 0.6.0 Socket.IO database_backup Handler Allows Unauthenticated Peer to Destroy Database and Inject Arbitrary Data | 9.1 Critical | Updated |
| 2026-09-23 | CVE-2026-53983 | Ground Station Orbital-Source Configuration Path Accepts Unauthenticated Socket.IO SSRF Requests, Causing Outbound HTTP Requests to Attacker-Chosen Destinations | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-19535 | Advantech EKI-1242IEIMS LuCI Administrative Interface CSRF Lets Unauthenticated Attackers Perform Unauthorized State Changes via Logged-In Users | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-19438 | ABB Mint Workbench I Path Traversal Lets Unauthenticated Remote Attackers Access Sensitive Files (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-9586 | Sangoma Switchvox's SQL Injection Vulnerability Allows Unauthenticated Remote Attackers to Execute Arbitrary Database Queries and Compromise the Telephony Platform | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-9198 | IBM Langflow's Code Injection Flaw Allows Unauthenticated Remote Attackers to Execute Arbitrary Code on the AI Workflow Platform; CISA's August 7th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-9082 | Drupal Core's SQL Injection via Specially Crafted Database Abstraction API Requests Enables Privilege Escalation and Remote Code Execution; CISA's May 27th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-86218 | N-able N-central's Static Code Injection Flaw Allows Remote Attackers to Inject and Execute Arbitrary Code on the RMM Platform Without Prior Authentication | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-85706 | GitLab Community and Enterprise Edition's Path Traversal Flaw Allows Unauthenticated Remote Attackers to Read Arbitrary Files on the Server and Fully Compromise the GitLab Instance | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-83549 | SonicWall SMA1000 Appliances' OS Command Injection Allows Authenticated Local Attackers to Execute Arbitrary Commands with Root Privileges; CISA's September 5th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-83548 | SonicWall SMA1000 Appliances' Server-Side Request Forgery Allows Unauthenticated Remote Attackers to Reach Internal Services and Compromise the Secure Mobile Access Gateway; CISA's September 5th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-82329 | JFrog Artifactory Carries a 9.8 Critical Improper Authentication Flaw That Lets Unauthenticated Attackers Bypass Login Controls on the Artifact Repository | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-73570 | Zimbra Collaboration Suite's OS Command Injection Allows Authenticated Attackers to Execute Arbitrary Commands on the Email Server with Elevated Privileges; CISA's August 24th KEV Deadline Has Passed | 8.9 High | KEV |
| 2026-09-22 | CVE-2026-72898 | Metabase's SQL Injection Flaw Allows Unauthenticated Attackers to Execute Arbitrary Database Queries and Achieve Full Platform Compromise; CISA's August 14th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-6973 | Ivanti Endpoint Manager Mobile's Improper Input Validation Allows a Remotely Authenticated Administrator to Execute Code Remotely; CISA's May 10th KEV Deadline Has Passed | 7.2 High | KEV |
| 2026-09-22 | CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock's Use-After-Free Allows a Local Attacker to Gain Elevated Privileges via a Freed Memory Reference; CISA's August 25th KEV Deadline Has Passed | 7.0 High | KEV |
| 2026-09-22 | CVE-2026-65400 | Apple macOS's Improper Authentication Flaw Allows a Network Attacker to Bypass Login Controls and Gain Unauthorized Access to the Operating System; CISA's August 21st KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-64849 | MLflow's Server-Side Request Forgery Flaw Allows Remote Attackers to Use the ML Platform Server as a Proxy to Access Internal Services and Steal Credentials; CISA's September 2nd KEV Deadline Has Passed | 9.3 Critical | KEV |
| 2026-09-22 | CVE-2026-63077 | JetBrains TeamCity's Deserialization of Untrusted Data Allows Unauthenticated Remote Attackers to Execute Arbitrary Code on the CI/CD Server; CISA's August 8th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-63030 | WordPress Core Input Interpretation Conflict Exploited in the Wild Carries a Lapsed July 24th CISA KEV Mandate for Covered Entities | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-60137 | WordPress Core SQL Injection Enabling Database Access Joins CISA's Known Exploited Vulnerabilities Catalog; Covered Entities Past the August 4th Remediation Deadline | 5.9 Medium | KEV |
| 2026-09-22 | CVE-2026-60004 | Gitea's Code Injection Vulnerability Allows Unauthenticated Remote Attackers to Execute Arbitrary Code on the Repository Platform; CISA's August 28th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-59310 | Broadcom VMware vCenter's Path Traversal Flaw Allows Unauthenticated Remote Attackers to Access Files Outside the Web Root and Potentially Compromise the Virtualization Platform; CISA's August 21st KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-56291 | Balbooa Forms Unrestricted File Upload Requiring No Authentication Has Missed CISA's July 13th KEV Remediation Deadline; Covered Entities Are Now Out of Compliance | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-56290 | Joomlack Page Builder Lets Unauthenticated Users Upload Arbitrary Files, Enabling Remote Code Execution; CISA's July 10th KEV Mandate Has Lapsed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-55040 | Microsoft SharePoint's Weak Authentication Allows Attackers to Bypass Login Controls and Gain Unauthorized Access to SharePoint Sites and Data; CISA's August 21st KEV Deadline Has Passed | 9.1 Critical | KEV |
| 2026-09-22 | CVE-2026-50751 | Check Point Security Gateway's IKEv1 Key Exchange Flaw Lets Unauthenticated Attackers Establish Remote Access VPN Tunnels Without a Valid Password; CISA's June 11th KEV Deadline Has Passed | 9.3 Critical | KEV |
| 2026-09-22 | CVE-2026-48939 | iCagenda Joomla Event Calendar Extension Accepts Unrestricted File Uploads Without Authentication, Enabling Remote Code Execution; CISA's July 13th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-48908 | JoomShaper SP Page Builder Accepts Arbitrary File Uploads from Unauthenticated Users; CISA's July 10th KEV Deadline for Covered Entities Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-48907 | Joomla Content Editor Plugin Exposes Privileged Functions Without Proper Authorization; CISA's June 19th KEV Deadline for Covered Entities Has Lapsed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-48558 | SimpleHelp Accepts Unverified Cryptographic Signatures, Letting Remote Attackers Bypass Authentication; CISA's July 2nd KEV Deadline for Covered Entities Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-48172 | Any cPanel User Can Escalate Privileges Through LiteSpeed's Plugin; CISA's May 29th KEV Remediation Requirement for Covered Entities Has Expired | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-46817 | Oracle E-Business Suite's Improper Privilege Management in Oracle Payments Allows an Unauthenticated Network Attacker to Take Over the Payments Module via HTTP; CISA's July 18th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-45498 | Microsoft Defender's Unspecified Vulnerability Allows for Denial of Service; CISA's June 3rd KEV Deadline Has Passed | 4.0 Medium | KEV |
| 2026-09-22 | CVE-2026-45247 | Mirasvit Full Page Cache Warmer's Deserialization Flaw Lets Unauthenticated Attackers Reach Remote Code Execution via a Crafted PHP Object in the CacheWarmer Cookie; CISA's June 6th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-42897 | Microsoft Exchange Server's Outlook Web Access Cross-Site Scripting Flaw Executes Arbitrary JavaScript When Interaction Conditions Are Met; CISA's May 29th KEV Deadline Has Passed | 8.1 High | KEV |
| 2026-09-22 | CVE-2026-42018 | JFrog Artifactory's Improper Authentication Allows Network-Based Attackers to Bypass Login Controls and Gain Unauthorized Access to the Artifact Repository | 7.5 High | KEV |
| 2026-09-22 | CVE-2026-42016 | JFrog Artifactory's Incorrect Authorization Allows Authenticated Users to Access Artifacts and Repositories Outside Their Permitted Scope | 8.1 High | KEV |
| 2026-09-22 | CVE-2026-41091 | Microsoft Defender's Link Following Flaw Enables an Authorized Attacker to Elevate Privileges Locally; CISA's June 3rd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-39987 | Marimo's Pre-Authentication Flaw Gives Unauthenticated Attackers Shell Access and Arbitrary Command Execution; CISA's May 7th KEV Remediation Requirement for Covered Entities Has Long Lapsed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-39808 | Fortinet FortiSandbox's OS Command Injection Gives Unauthenticated Attackers Remote Code Execution via Crafted HTTP Requests; CISA's July 19th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-35616 | Fortinet FortiClient EMS Access Control Bypass Entered CISA's Known Exploited Vulnerabilities Catalog with an April 9th Federal Deadline That Has Long Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools' Missing Authentication for a Critical Function Allows Unauthenticated Attackers to Take Over the Platform; CISA's June 15th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-34926 | Pre-Authenticated Local Attackers Can Use Relative Path Traversal in Trend Micro Apex One to Modify Key Configuration Data; CISA's June 4th KEV Mandate for Covered Entities Has Lapsed | 6.7 Medium | KEV |
| 2026-09-22 | CVE-2026-34910 | Network-Adjacent Attackers Can Inject Commands into Ubiquiti UniFi OS Through an Input Validation Flaw; CISA's June 26th KEV Remediation Window Has Closed for Covered Entities | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-34909 | Ubiquiti UniFi OS's Path Traversal Lets a Network-Adjacent Attacker Access Files on the Underlying System and Manipulate an Underlying Account; CISA's June 26th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-34908 | Ubiquiti UniFi OS's Improper Access Control Lets a Network-Adjacent Attacker Make Unauthorized Changes to the System; CISA's June 26th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-34486 | Apache Tomcat's Missing Encryption of Sensitive Session Data Exposes Credentials and Tokens to Network Interception; CISA's August 7th KEV Deadline Has Passed | 7.5 High | KEV |
| 2026-09-22 | CVE-2026-34197 | Apache ActiveMQ's Improper Input Validation Enables Code Injection Affecting Both ActiveMQ and Broker Deployments; CISA's April 30th KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-22 | CVE-2026-33825 | Microsoft Defender's Insufficient Access Control Allows an Authorized Attacker to Escalate Privileges Locally; CISA's May 6th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-32202 | Microsoft Windows Shell's Protection Mechanism Failure Allows an Unauthorized Attacker to Perform Spoofing Over the Network; CISA's May 12th KEV Deadline Has Passed | 4.3 Medium | KEV |
| 2026-09-22 | CVE-2026-31431 | Linux Kernel Resource Mishandling That Allows Privilege Escalation Carries a Lapsed May 15th CISA KEV Mandate; Covered Entities on Unpatched Kernels Remain Out of Compliance | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-28318 | SolarWinds Serv-U File Transfer Server Resource Exhaustion Exploited in the Wild Carries a Lapsed June 19th CISA KEV Federal Deadline | 7.5 High | KEV |
| 2026-09-22 | CVE-2026-25089 | Fortinet FortiSandbox's Unauthenticated OS Command Injection via Crafted HTTP Requests Covers Cloud and PaaS Deployments; CISA's July 19th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-21962 | Oracle HTTP Server and WebLogic Server Proxy Plug-in's Improper Access Control Allows Unauthenticated Network Attackers to Fully Compromise the Middleware Platform; CISA's August 27th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-21643 | Fortinet FortiClient EMS's SQL Injection Allows Unauthenticated Attackers to Execute Unauthorized Code via Crafted HTTP Requests; CISA's April 16th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-20316 | Cisco Secure Firewall Management Center Hard-Coded Password Lets Attackers Bypass Authentication; CISA's August 1st KEV Deadline for Covered Entities Has Passed | 5.3 Medium | KEV |
| 2026-09-22 | CVE-2026-20262 | Authenticated Path Traversal in Cisco Catalyst SD-WAN Manager Lets Remote Attackers Write Files Outside Allowed Directories; CISA's June 29th KEV Deadline Has Passed | 6.5 Medium | KEV |
| 2026-09-22 | CVE-2026-20253 | Splunk Enterprise's Missing Authentication on a PostgreSQL Sidecar Service Endpoint Lets Unauthenticated Users Create or Truncate Arbitrary Files; CISA's June 21st KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-20245 | Cisco Catalyst SD-WAN Manager's Improper Encoding Allows an Authenticated Local Attacker to Execute Arbitrary Commands as Root via a Crafted File; CISA's June 23rd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-20230 | Cisco Unified Communications Manager SSRF Flaw Routes Attacker Requests to Internal Resources; CISA's June 28th KEV Deadline for Covered Entities Has Lapsed | 8.6 High | KEV |
| 2026-09-22 | CVE-2026-20182 | Cisco Catalyst SD-WAN Controller and Manager's Authentication Bypass Gives Unauthenticated Remote Attackers Administrative Privileges; CISA's May 17th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Leaks Sensitive Configuration Data to Unauthorized Users; CISA's April 23rd KEV Remediation Requirement Has Expired for Covered Entities | 6.5 Medium | KEV |
| 2026-09-22 | CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Stores Credentials in a Recoverable Format, Enabling Credential Theft; CISA's April 23rd KEV Mandate for Covered Entities Has Lapsed | 7.5 High | KEV |
| 2026-09-22 | CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Exposes Privileged API Functions to Unauthorized Callers; CISA's April 23rd KEV Remediation Deadline for Covered Entities Has Long Passed | 5.4 Medium | KEV |
| 2026-09-22 | CVE-2026-20079 | Cisco Firewall Management Center's Authentication Bypass via an Alternate Path Grants Unauthenticated Remote Attackers Full Administrative Control; CISA's September 12th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-19490 | Citrix NetScaler's Authentication Bypass via an Alternate Path Allows Unauthenticated Remote Attackers to Access Protected Resources Without Valid Credentials | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-16232 | Check Point SmartConsole's Improper Authentication Allows Unauthenticated Remote Attackers to Obtain a Login Token and Authenticate with Full Administrative Privileges; CISA's July 25th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-15410 | SonicWall SMA1000's Code Injection Allows a Remote Authenticated Administrator to Execute Arbitrary OS Commands Under Specific Conditions; CISA's July 17th KEV Deadline Has Passed | 7.2 High | KEV |
| 2026-09-22 | CVE-2026-15409 | SonicWall SMA1000 Secure Access Appliances Accept Forged Server-Side Requests, Enabling Internal Network Pivoting; CISA's July 17th KEV Remediation Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-1340 | Ivanti Endpoint Manager Mobile's Code Injection Vulnerability Allows Attackers to Achieve Unauthenticated Remote Code Execution; CISA's April 11th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-12569 | PTC Windchill and FlexPLM's Improper Input Validation Allows Unauthenticated Remote Attackers to Execute Arbitrary Code via Malicious Network Requests; CISA's June 28th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-10520 | Ivanti Sentry's OS Command Injection Gives Remote Unauthenticated Attackers Root-Level Remote Code Execution; CISA's June 14th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-0300 | PAN-OS Out-of-Bounds Write Enabling Code Execution Affects Both Palo Alto Networks Firewalls and Siemens RUGGEDCOM APE1808 Industrial Appliances; CISA's May 9th KEV Window Has Closed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-0257 | PAN-OS Authentication Bypass Enabling Unauthorized VPN Tunnels Affects Palo Alto Networks Prisma Access and Siemens RUGGEDCOM APE1808; Now Listed in CISA's Known Exploited Vulnerabilities Catalog | 9.1 Critical | KEV |
| 2026-09-22 | CVE-2026-7273 | Zyxel GS1900 Series Switches' CGI Program Stack-Based Buffer Overflow Allows a LAN-Side Unauthenticated Attacker to Execute OS Commands via Crafted HTTP Requests; CISA's September 24th KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-22 | CVE-2026-31278 | Suprema BioStar 2 Active Directory Settings Endpoint Exposes Service Account Credentials in Cleartext to Crafted GET Requests | 7.7 High | Updated |
| 2026-09-20 | CVE-2026-87886 | Acronis Backup's Incorrect Default Permissions Allow a Local Attacker to Access Backup Files and Configurations Not Intended for Their Account; CISA's September 19th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-20 | CVE-2026-84869 | ConnectWise ScreenConnect's Improper Privilege Management and Missing Authorization Allow Unauthenticated Attackers to Gain Administrative Control of the Remote Support Platform; CISA's September 14th KEV Deadline Has Passed | 9.9 Critical | KEV |
| 2026-09-20 | CVE-2026-81963 | Windows Update Stack Symbolic Link Following Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | KEV |
| 2026-09-20 | CVE-2026-67277 | MikroTik RouterOS's Missing Authentication for a Critical Function Allows Unauthenticated Attackers to Access and Modify Router Configuration; CISA's September 13th KEV Deadline Has Passed | 8.2 High | KEV |
| 2026-09-20 | CVE-2026-53362 | Linux Kernel's Unspecified Flaw Allows Local Attackers to Gain Elevated Privileges on Affected Systems; CISA's August 30th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-20 | CVE-2026-53266 | Linux Kernel's Out-of-Bounds Write Vulnerability Allows Local Attackers to Escalate Privileges or Cause a Kernel Crash; CISA's September 21st KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-20 | CVE-2026-20349 | Cisco Secure Firewall ASA and FTD's Heap Inspection Vulnerability Allows Remote Attackers to Extract Sensitive Memory Contents from the Firewall Device; CISA's August 14th KEV Deadline Has Passed | 8.6 High | KEV |
| 2026-09-20 | CVE-2026-72530 | TrueConf Server's Code Injection Vulnerability Allows Remote Attackers to Execute Arbitrary Code on the Video Conferencing Platform; CISA's September 3rd KEV Deadline Has Passed | 9.0 Critical | KEV |
| 2026-09-20 | CVE-2026-72529 | TrueConf Server's Missing Authentication on a Critical Function Allows Unauthenticated Remote Attackers to Access Administrative Capabilities; CISA's August 23rd KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-18 | CVE-2026-87491 | Google Chromium V8's Out-of-Bounds Write Allows Remote Attackers to Corrupt the JavaScript Engine's Heap and Execute Arbitrary Code via a Crafted Web Page | 8.8 High | KEV |
| 2026-09-18 | CVE-2026-59822 | BerriAI LiteLLM's Improper Authentication Allows Unauthenticated Attackers to Access the AI Model Gateway and Interact with Configured LLM Endpoints Without Credentials | 8.2 High | KEV |
| 2026-09-18 | CVE-2026-58704 | Google Pixel's Improper Authorization Flaw Allows an Attacker with Physical or Local Access to Bypass Permission Controls and Access Protected Device Functions | 8.8 High | KEV |
| 2026-09-18 | CVE-2026-49869 | Kestra OSS's OS Command Injection Flaw Lets Unauthenticated Remote Attackers Execute Arbitrary Commands on the Workflow Orchestration Server with Full System Privileges | 10.0 Critical | KEV |
| 2026-09-18 | CVE-2026-80469 | Sick AG Sentio Creator Device Manager Extension Bypasses Driver Signature Verification, Allowing Malicious Package to Execute Arbitrary Code | 8.3 High | Updated |
| 2026-09-18 | CVE-2026-3869 | Schneider Electric Modicon M580 Incorrect Authentication Algorithm Implementation Risks Full PLC Compromise When a Lower Application Level Project Is Running | 9.2 Critical | Updated |
| 2026-09-18 | CVE-2026-27563 | Crafted GET Request to the Datastorage API Lets Admin Credentials Trigger Root Command Execution on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-18 | CVE-2026-27558 | Operator Access to the IODD File Removal Endpoint on Pepperl+Fuchs ICE-Series IO-Link Masters Allows Root Command Injection | 8.8 High | Updated |
| 2026-09-18 | CVE-2026-27548 | Command Injection in the IODD Port Info Endpoint Grants Root Access on Pepperl+Fuchs ICE-Series IO-Link Masters to Any User or Operator Account | 8.8 High | Updated |
| 2026-09-18 | CVE-2026-15579 | Moxa TN-4500B Series Ethernet Switch Out-of-Bounds Write in Web Login Username Field Allows Remote Unauthenticated Attacker to Execute Code | 8.8 High | Updated |
| 2026-09-18 | CVE-2023-5778 | ABB Freelance Controller DCP, AC700, AC800, and AC900 Improper Length Parameter Handling Allows Remote Denial of Service | 7.5 High | Updated |
| 2026-09-16 | CVE-2026-53006 | Linux Kernel ICMPv6 Use-After-Free via Pointer Cached Before pskb_pull on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-09-16 | CVE-2026-27565 | Unauthenticated IODD File Upload on Pepperl+Fuchs ICE-Series IO-Link Masters Executes a Root Shell Script That Persists Across Reboots | 9.8 Critical | Updated |
| 2026-09-16 | CVE-2026-27564 | Pepperl+Fuchs ICE-Series IO-Link Masters Run Injected Root Commands When Admin Credentials Submit a Crafted PUT Request to the Datastorage API | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27562 | Admin-Level PUT Requests to the IODD Configuration API Execute Injected Commands as Root on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27561 | Admin Credentials Enable Root Command Injection via the IODD Config GET API on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27560 | Admin-Credentialed DELETE Requests to Pepperl+Fuchs ICE-Series IO-Link Masters' Status API Carry Injected Commands Executed at Root | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27559 | User Credentials Are Enough to Inject Root-Level Commands via the Status Data API on Pepperl+Fuchs ICE-Series IO-Link Masters | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27557 | Unauthenticated Path Traversal in Pepperl+Fuchs ICE-Series IO-Link Masters Exposes the Device's SSH Server Private Keys | 7.5 High | Updated |
| 2026-09-16 | CVE-2026-27556 | Operator Cookie Enables Arbitrary PHP Code Execution on Pepperl+Fuchs ICE-Series IO-Link Masters via Local File Inclusion in the IODD Parameter Save Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27555 | A Valid User Cookie Triggers Arbitrary PHP Code Execution on Pepperl+Fuchs ICE-Series IO-Link Masters via Local File Inclusion in the IODD Port Info Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27554 | IODD Parameter Save Endpoint on Pepperl+Fuchs ICE-Series IO-Link Masters Accepts Injected Commands from Operator-Level Accounts, Yielding Root Access | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27552 | Pepperl+Fuchs ICE-Series IO-Link Masters Allow Low-Privileged Users to Upload Arbitrary IODD Files via a Missing Authorization Check, Enabling Device Manipulation or Crashes | 8.1 High | Updated |
| 2026-09-16 | CVE-2026-27551 | User-Level Credentials Give Root Shell on Pepperl+Fuchs ICE-Series IO-Link Masters via the Parameter Management Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27550 | Operator Credentials Can Inject Root-Level OS Commands via the Field_Shadow_Password Handler on Pepperl+Fuchs ICE-Series IO-Link Masters | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27549 | Operator-Level Credentials Suffice to Run Root Commands on Pepperl+Fuchs ICE-Series IO-Link Masters via the IODD Upload Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27547 | IODD Menu Info Request on Pepperl+Fuchs ICE-Series IO-Link Masters Passes Unvalidated Parameters to Root-Level Commands, Reachable with User-Level Credentials | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27546 | The _account_log Function in Pepperl+Fuchs ICE-Series IO-Link Masters Lets Unauthenticated Attackers Log In as Admin Regardless of Account Configuration | 9.8 Critical | Updated |
| 2026-09-15 | CVE-2026-46116 | Linux Kernel xfrm_state List Defensively Not Unhashed in __xfrm_state_delete on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-14 | CVE-2026-62647 | Siemens Reyrolle 7SR5 Weak Random Number Generator Produces Low-Entropy Session Identifiers | 7.4 High | Updated |
| 2026-09-14 | CVE-2026-34223 | Siemens Desigo CC ClickOnce Client Code Injection Vulnerability Across All Versions from V6 Through V9 | 8.2 High | Updated |
| 2026-09-11 | CVE-2026-81822 | AVEVA Pipeline Integrity Monitor Weak Password Hashing in PIMBoards Project Files Allows Credential Recovery via Brute Force | 8.4 High | Updated |
| 2026-09-11 | CVE-2026-81821 | AVEVA Pipeline Integrity Monitor Hard-Coded Encryption Key in PIMBoards Project Files Exposes Sensitive Information to File Read Access | 8.4 High | Updated |
| 2026-09-10 | CVE-2026-62646 | Siemens Reyrolle 7SR5 Session Identifier Generated with Insufficient Randomness, Enabling Token Prediction Attacks | 7.4 High | Updated |
| 2026-09-10 | CVE-2026-53002 | Linux Kernel netfilter Conntrack sprintf Usage Risks Buffer Overrun on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-09-10 | CVE-2026-50064 | Siemens Solid Edge Out-of-Bounds Write During File Parsing Enables Code Execution Under Current User Process Context | 7.8 High | Updated |
| 2026-09-10 | CVE-2026-50063 | Siemens Solid Edge Out-of-Bounds Read During File Parsing Can Lead to Code Execution Under Current User Process Context | 7.8 High | Updated |
| 2026-09-10 | CVE-2026-50062 | Siemens Solid Edge Out-of-Bounds Read During File Parsing Can Lead to Code Execution Under Current User Context | 7.8 High | Updated |
| 2026-09-10 | CVE-2026-50061 | Siemens Solid Edge Use-After-Free During File Parsing Enables Code Execution Under Current User Process Context | 7.8 High | Updated |
| 2026-09-10 | CVE-2026-50060 | Siemens Solid Edge Use-After-Free During File Parsing Enables Code Execution Under Current User Process Context | 7.8 High | Updated |
| 2026-09-10 | CVE-2026-50059 | Siemens Solid Edge Out-of-Bounds Write During File Parsing Enables Code Execution Under Current User Process Context | 7.8 High | Updated |
| 2026-09-10 | CVE-2026-50058 | Siemens Solid Edge Out-of-Bounds Read on Parsing Specially Crafted Files Can Lead to Code Execution | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-9854 | Hitachi Energy MicroSCADA X SYS600 Engineering Tool Access Can Escalate Privileges to Administrator on the Underlying Windows Host | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-9853 | Hitachi Energy MicroSCADA X SYS600 RBAC Flaw Lets Any OS-Authenticated User Access and Modify Application Objects Without Application Login | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-9852 | Hitachi Energy MicroSCADA X SYS600 CSV Injection Vulnerability Allows Authenticated Users to Inject Formulas into Exported Spreadsheets | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-8044 | Schneider Electric EcoStruxure IT Data Center Expert Argument Injection in Privileged Account Context Enables Remote Code Execution | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-77120 | Schneider Electric PowerLogic T300 OS Command Injection via Admin-Privileged Context Allows Privilege Escalation to Root | 8.7 High | Updated |
| 2026-09-09 | CVE-2026-67367 | Siemens SIMOVE Fleetmanager Path Traversal Allows Unauthenticated Attacker to Read Sensitive Files via Relative Path Manipulation | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-62649 | Siemens Reyrolle 7SR5 Web Server Resource Exhaustion Under High Concurrent HTTP Request Volume Causes Denial of Service | 7.5 High | Updated |
| 2026-09-09 | CVE-2026-19233 | Schneider Electric EcoStruxure IT Data Center Expert Server-Side Request Forgery in Privileged Account Context Risks Unauthorized Command Execution | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-11841 | Sick AG InspectorP Sensor AppEngine HTTP Fileaccess Allows Unauthenticated Read and Write Operations on Sensitive Filesystem Areas | 9.4 Critical | Updated |
| 2026-09-08 | CVE-2026-80465 | Siemens Mendix SAML Module JWT Algorithm Substitution Flaw Allows Unauthenticated Remote Authentication Bypass | 8.7 High | Updated |
| 2026-09-08 | CVE-2026-77393 | Inductive Automation Ignition Blank Project Role Creation Setting Allowed Any Authenticated User to Create Projects in Versions Up to 8.1.53 | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-64560 | Linux Kernel POSIX CPU Timer Use-After-Free via Non-Leader exec() Race on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-64552 | Linux Kernel virtio-net receive_big() Length Bounds Check Error Allows Malicious Device to Trigger Out-of-Bounds Write on Siemens SIMATIC S7-1500 MFP | 8.4 High | Updated |
| 2026-09-08 | CVE-2026-64545 | Linux Kernel XDP Master Redirect NULL Pointer Dereference on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-64423 | Linux Kernel IPv4 IGMP Use-After-Free During Network Device Teardown on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-64422 | Linux Kernel IPv4 TCP Reordering Sysctl and MTU Probe Size Validation Gap on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-64413 | Linux Kernel ebtables chainstack Array Not Zeroed Before Use on Siemens SIMATIC S7-1500 MFP | 7.0 High | Updated |
| 2026-09-08 | CVE-2026-64412 | Linux Kernel ebtables Module Name Not Null-Terminated Before Lookup on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-64411 | Linux Kernel ebtables Update Counter Path Does Not Null-Terminate Table Name Before Lookup on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-64375 | Linux Kernel proc ptrace_may_access Race via FD Links Not Locked by exec_update_lock on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-64317 | Linux Kernel ISO 9660 Rock Ridge Symlink Component Bounds Not Enforced Against SL Record on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-64279 | Linux Kernel I2C Adapter Deregistration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-62650 | Siemens Reyrolle 7SR5 Web Management Server-Side Authorization Not Enforced, Allowing Role-Based Access Control Bypass | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-62648 | Siemens Reyrolle 7SR5 Web Server URL Component Length Not Validated Before Use in Pre-Authenticated HTTP Messages, Enabling Denial of Service | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-62645 | Siemens Reyrolle 7SR5 Web Interface Exposes Session ID Calculation Information, Allowing Session Hijacking Without Credentials | 9.8 Critical | Updated |
| 2026-09-08 | CVE-2026-53400 | Linux Kernel I2C Adapter Registration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-53275 | Linux Kernel IPv6 Multicast MLD Query Processing Use-After-Free on Siemens SIMATIC S7-1500 MFP | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-53268 | Linux Kernel netfilter conntrack_irc Out-of-Bounds Read on Command Parse Failure on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-09-08 | CVE-2026-53239 | Linux Kernel xfrm Policy Inexact Bin Use-After-Free in xfrm_policy_bysel_ctx on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-53223 | Linux Kernel Timestamp Control Message Handling Gap in Non-Error Queue skbs on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-53050 | Linux Kernel Quota dquot_scan_active Race with Quota Deactivation on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-52999 | Linux Kernel netfilter nfnetlink_osf Out-of-Bounds Read in Option Matching on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-09-08 | CVE-2026-52998 | Linux Kernel netfilter nfnetlink_osf NULL Pointer Dereference in TTL Check on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-52986 | Linux Kernel SIP Conntrack NULL Pointer Dereference via Unsafe Port Parsing on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-09-08 | CVE-2026-52946 | Linux Kernel fcntl Async Signal Lock Order Inversion Between SOFTIRQ-Safe and SOFTIRQ-Unsafe Paths on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-52943 | Linux Kernel sk_buff Zerocopy Reference Missing in pskb_carve Helpers on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-52942 | Linux Kernel netfilter nf_log MAC Header Dump Not Guarded Against Unset Headers on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-52933 | Linux Kernel io_uring Poll Ownership Check Uses Signed Comparison, Creating Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-52912 | Linux Kernel netfilter nf_queue Bridge Device Reference Held Too Briefly in br_pass_frame_up on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-52910 | Linux Kernel BPF Reuseport cBPF Program Free Before RCU Grace Period on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-50093 | Siemens Siveillance Control Arbitrary File Upload Exploitable by Low-Privilege Authenticated Remote Attacker | 9.0 Critical | Updated |
| 2026-09-08 | CVE-2026-46323 | Linux Kernel GRO zcopy Frags Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-46306 | Linux Kernel Flow Dissector PPPoE PFC Frames Dissected When They Should Be Skipped on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-46303 | Linux Kernel ISO 9660 Rock Ridge CE Continuation Extent Not Validated Against Volume Size on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-09-08 | CVE-2026-46300 | Linux Kernel SKBFL_SHARED_FRAG Marker Lost During sk_buff Coalescing on Siemens SIMATIC S7-1500 MFP Enables ESP In-Place Decrypt over Page-Cache Memory | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-46173 | Linux Kernel Exit Path Race Causes Preemption of Oopsing TASK_DEAD Task on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-46037 | Linux Kernel IPv4 ICMP Extended Echo Reply Type Not Validated Before Pointer Use on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-09-08 | CVE-2026-46033 | Linux Kernel authencesn Instance Creation Accepts Short Hash Digests That Could Lead to Incorrect Authentication on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-46015 | Linux Kernel TCP Listener Migration Race on Siemens SIMATIC S7-1500 MFP After Listening Socket Closes | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-43501 | Linux Kernel IPv6 RPL Source Routing Header Recompression Buffer Headroom Not Reserved on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-09-08 | CVE-2026-43499 | Linux Kernel rtmutex Slow Lock Waiter Task Reference Incorrect in remove_waiter on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-43303 | Linux Kernel Page Allocator Free Path Leaves page->private Stale on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-43284 | Linux Kernel ESP In-Place Decrypt on Pipe-Spliced Shared Frags Risks Memory Corruption on Siemens SIMATIC S7-1500 MFP | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-43116 | Linux Kernel netfilter ctnetlink Master Conntrack Access Without Sufficient Reference on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-43071 | Linux Kernel dcache Hashtable Out-of-Bounds Read When dhash_entries Set to 1 on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-09-08 | CVE-2026-31700 | Linux Kernel PACKET_VNET_HDR TOCTOU Race on mmap'd vnet_hdr in tpacket_snd on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-31449 | Linux Kernel ext4 Extent Tree Index Bounds Validation Gap on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-18963 | Siemens Industrial Edge Management Keycloak Reset-Credentials Flow Flaw Allows Unauthenticated Account Takeover | 9.1 Critical | Updated |
| 2026-09-08 | CVE-2025-46418 | Westermo WeOS OS Command Injection via Media Definition Requires Authenticated Attacker with High Privileges | 7.6 High | Updated |
| 2026-09-03 | CVE-2026-78319 | Sauter modu680 Building Automation Controller TOCTOU Race Condition Allows Unauthenticated Remote Security Bypass | 9.3 Critical | Updated |
| 2026-09-03 | CVE-2026-65423 | open62541 OPC UA Integer Overflow in arrayDimensions Computation Allows Remote Attacker to Trigger Out-of-Bounds Write | 8.8 High | Updated |
| 2026-09-03 | CVE-2026-63559 | open62541 OPC UA Integer Overflow in arrayDimensions Computation Allows Remote Out-of-Bounds Heap Memory Read | 7.5 High | Updated |
| 2026-09-03 | CVE-2026-63035 | open62541 OPC UA TransferSubscriptions Service Heap Use-After-Free Allows Authenticated Attacker to Cause Denial of Service or Code Execution | 8.1 High | Updated |
| 2026-09-03 | CVE-2026-6071 | Rockwell Automation Arena Simulation Out-of-Bounds Write When Parsing DOE Files Enables Code Execution When a User Opens a Malicious File | 7.5 High | Updated |
| 2026-09-03 | CVE-2024-7956 | Rockwell Automation DataMosaix Private Cloud Authorization Flaw Lets Low-Privilege Users Access Other Users' Projects | 7.6 High | Updated |
| 2026-09-01 | CVE-2026-9637 | Rockwell Automation CompactLogix 5380 and ControlLogix 5580 CIP Message Input Length Validation Gap Causes Denial of Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9634 | Rockwell Automation Redundancy Module Configuration Tool DLL Search Order Hijack via Unquoted System Path | 7.0 High | Updated |
| 2026-09-01 | CVE-2026-9633 | Rockwell Automation Redundancy Module Configuration Tool DLL Search Order Hijack via Unquoted System Path in RM3ConfigTool.exe | 7.0 High | Updated |
| 2026-09-01 | CVE-2026-9625 | Rockwell Automation RSLinx Classic Oversized Embedded CIP Message Request Crashes Service, Requiring Manual Restart | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9624 | Rockwell Automation RSLinx Classic Integer Underflow on CIP Packet Data Length Validation Crashes Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9622 | Rockwell Automation RSLinx Classic Forward Close CIP Packet Handling Crash Requires Manual Service Restart | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9621 | Rockwell Automation RSLinx Classic Crashes on Malformed CIP Packet Due to Integer Overflow, Requiring Manual Service Restart | 9.2 Critical | Updated |
| 2026-09-01 | CVE-2026-84235 | Rockwell Automation 1756-ENBT Module Crashes on Crafted CIP Packet, Requiring Device Restart to Recover | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-78317 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78316 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78315 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78314 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-35535 | Sudo Privilege Drop Failure in setuid/setgid Not Treated as Fatal Error, Enabling Privilege Escalation During Mailer Execution | 7.4 High | Updated |
| 2026-09-01 | CVE-2026-19472 | Rockwell Automation ArmorStart LT Embedded Web Server Crashes on Crafted HTTP PUT Request, Causing Denial of Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-16675 | Rockwell Automation FactoryTalk Activation Manager Installer Custom Action Spawns SYSTEM-Level Console Window, Enabling Privilege Escalation | 8.5 High | Updated |
| 2026-09-01 | CVE-2026-13336 | Schneider Electric NetBotz 5 OS Command Injection During System Backup Restore Lets Authenticated Admin Execute Arbitrary Linux Commands | 7.3 High | Updated |
| 2026-09-01 | CVE-2026-12663 | Rockwell Automation ControlFLASH Installer Grants Write Access to Everyone Group on Installation Directory, Enabling Arbitrary Code Execution | 7.0 High | Updated |
| 2026-09-01 | CVE-2025-12768 | Rockwell Automation FactoryTalk Historian Machine Edition Out-of-Bounds Write Accessible to Low-Privilege Adjacent Network Attackers | 8.6 High | Updated |
| 2026-09-01 | CVE-2024-7953 | Rockwell Automation DataMosaix Private Cloud Lets Any Authenticated User Self-Promote to Project Administrator and Modify Project Data | 8.7 High | Updated |
| 2026-09-01 | CVE-2024-7952 | Rockwell Automation DataMosaix Private Cloud Hardcoded Source Code Links Expose JSON Files Containing Sensitive Data Without Authentication | 8.7 High | Updated |
| 2026-09-01 | CVE-2024-10085 | Schneider Electric EcoStruxure OPC UA Server Expert Unconstrained OPC UA Request Allocation Causes Denial of Service | 8.2 High | Updated |
| 2026-08-28 | CVE-2026-66155 | Siemens Element maps-ng Cross-Site Scripting in si-map Component Affects Multiple Software Versions | 7.6 High | Updated |
| 2026-08-28 | CVE-2026-64629 | Siemens Parasolid Out-of-Bounds Read on Specially Crafted File Parse Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59701 | Siemens Simcenter Femap Out-of-Bounds Read Parsing BMP Files Can Lead to Code Execution in the Current User Context | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59700 | Siemens Simcenter Femap Out-of-Bounds Read on Parsing Specially Crafted BMP Files Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59086 | Siemens Simcenter Femap and Nastran Stack-Based Buffer Overflow When Parsing Specially Crafted Files Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-58115 | Siemens SIMATIC IoT2050 Advanced with Node-RED Does Not Enforce Authentication on Node-RED API Endpoint | 10.0 Critical | Updated |
| 2026-08-26 | CVE-2026-71276 | Magistrala Message Reader API Interpolates Unvalidated HTTP Query Parameters Directly into Raw SQL Queries | 7.1 High | Updated |
| 2026-08-26 | CVE-2026-71235 | Magistrala Rules Engine Lua Script Engine Performs No Input Validation, Allowing Authenticated Users to Execute Arbitrary Server-Side Code | 8.8 High | Updated |
| 2026-08-25 | CVE-2026-9128 | Rockwell Automation Studio 5000 Logix Designer Unquoted Search Path in External Tools Configuration Allows Low-Privilege Code Execution | 7.5 High | Updated |
| 2026-08-25 | CVE-2026-9127 | Rockwell Automation Studio 5000 Logix Designer External Tool Config File Incorrect Authorization Allows Any Authenticated User to Modify Tool Paths | 7.5 High | Updated |
| 2026-08-25 | CVE-2026-9108 | Rockwell Automation Studio 5000 Logix Designer Path Traversal via Malicious ACD Project File Allows Arbitrary File Write | 7.5 High | Updated |
| 2026-08-24 | CVE-2026-46333 | Linux Kernel ptrace Dumpability Logic Flaw Risks Privilege Escalation via Memory Image Exposure on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-08-24 | CVE-2026-21661 | Johnson Controls AC2000 Access Control System Uncontrolled Search Path Allows Authenticated Local Attacker to Leverage Configuration File Paths | 8.4 High | Updated |
| 2026-08-20 | CVE-2026-43038 | Linux Kernel IPv6 ICMP Error Generation Leaves skb2->cb[] Uncleared on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-08-17 | CVE-2026-25193 | Gallagher Command Centre Service Installer Log File Exposes Service Account Credentials During Installation | 8.1 High | Updated |
| 2026-08-11 | CVE-2026-33390 | Nozomi Networks Guardian Arc Sensor Sync Incorrectly Grants CLI Permissions to Low-Privileged Authenticated Users | 8.1 High | Updated |
| 2026-08-11 | CVE-2026-31984 | Nozomi Networks Guardian Audit Logging Missing Input Size Limit Allows Unauthenticated Attacker to Cause Denial of Service | 7.5 High | Updated |
| 2026-08-11 | CVE-2026-31982 | Nozomi Networks Guardian SAML Single Sign-On Open Redirect via Unvalidated Redirection Parameter Allows Unauthenticated Phishing Attack | 7.1 High | Updated |
| 2026-08-11 | CVE-2026-3014 | Milestone XProtect Management Server API Allows Users with Edit Permission to Execute OS Commands via Crafted Requests | 9.1 Critical | Updated |
| 2026-08-11 | CVE-2026-0287 | Palo Alto Networks PAN-OS Multiple Denial-of-Service Vulnerabilities Allow Unauthenticated Network Attacker to Disrupt Firewall Service | 7.5 High | Updated |
| 2026-08-11 | CVE-2026-0286 | Palo Alto Networks PAN-OS Management Plane Command Injection Allows Authenticated Administrator to Execute Arbitrary Root-Level OS Commands | 7.2 High | Updated |
| 2026-08-11 | CVE-2026-0284 | Palo Alto Networks PAN-OS LSVPN XML Injection Allows Unauthenticated Network Attacker to Inject Malicious Content | 9.9 Critical | Updated |
| 2026-08-11 | CVE-2026-0283 | Palo Alto Networks PAN-OS Large Scale VPN Authentication Bypass Allows Network Attackers to Bypass Security Restrictions | 7.2 High | Updated |
| 2026-08-11 | CVE-2026-0281 | Palo Alto Networks PAN-OS Web Session Token Exposed to Unauthenticated Network Attacker via Management Interface | 7.1 High | Updated |
| 2026-08-11 | CVE-2026-0280 | Palo Alto Networks PAN-OS IPv6 Packet Processing Flaw Allows Unauthenticated Attackers to Bypass Firewall Security Policy | 7.2 High | Updated |
| 2026-08-11 | CVE-2025-40833 | Siemens IE/PB LINK Null Pointer Dereference on Specially Crafted IPv4 Requests Causes Denial of Service Requiring Manual Reset | 7.5 High | Updated |
| 2026-07-31 | CVE-2026-44106 | Phoenix Contact CHARX SEC Init-Script for User Applications Allows Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-31 | CVE-2026-44101 | Phoenix Contact CHARX OCPP Agent Service Missing Authentication Allows Unauthenticated Remote Attacker to Reconfigure Backend Connection | 9.8 Critical | Updated |
| 2026-07-31 | CVE-2026-44096 | Phoenix Contact CHARX SEC udhcpc Privilege Escalation Lets the charx-web User Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-31 | CVE-2026-44091 | Phoenix Contact CHARX SEC MQTT Broker Accepts Unauthenticated Malicious ID Injection That Creates Unauthorized Configuration Entries | 9.1 Critical | Updated |
| 2026-07-31 | CVE-2026-22620 | Eaton Tripp Lite PADM Authentication Component Input Validation Flaw Allows Unauthenticated Attackers to Gain Privileged Access | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-7849 | Phoenix Contact CHARX SEC Unauthenticated Remote Attacker Can Inject System Configuration Commands Executed as Root | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44108 | Phoenix Contact CHARX SEC Firewall Terminated Prematurely During System Shutdown Creates Temporary Window Exposing Internal Services | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44107 | Phoenix Contact CHARX SEC Modbus TCP Reboot Command Requires No Authentication When Port Is Open | 7.5 High | Updated |
| 2026-07-30 | CVE-2026-44104 | Phoenix Contact CHARX SEC Firmware Update Process for Base Module Lacks Cryptographic Signature Verification, Allowing Unauthenticated Remote Firmware Replacement | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44100 | Phoenix Contact CHARX JupiCore Allows Unauthenticated Remote Attacker to Reconfigure Charging Points and Access Charging Point UIDs | 9.4 Critical | Updated |
| 2026-07-30 | CVE-2026-44099 | Phoenix Contact CHARX SEC EV Charging Controller System Configuration Flaw Lets Local Low-Privilege User Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44098 | Phoenix Contact CHARX SEC OCPP Backend Firewall Bypass Enables Unauthenticated Remote OS Command Execution | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-44097 | Phoenix Contact CHARX SEC Firmware Update REST Endpoint Accepts Arbitrary File Uploads from Low-Privileged Operator Accounts | 7.1 High | Updated |
| 2026-07-30 | CVE-2026-44095 | Phoenix Contact CHARX SEC Network Configuration Script Allows Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44094 | Phoenix Contact CHARX SEC Unauthenticated Remote Attacker Can Force Fallback to Firmware Partition with Default Credentials | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-44093 | Phoenix Contact CHARX SEC Charging Controller Init-Script Flaw Enables Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44092 | Phoenix Contact CHARX SEC ModbusServer Accepts Unvalidated MQTT Input, Letting Unauthenticated Backend-Control Attackers Inject Malicious Data | 9.1 Critical | Updated |
| 2026-07-30 | CVE-2026-44090 | Phoenix Contact CHARX SEC Unauthenticated MQTT Broker Accessible Behind Bypassed Firewall Risks Full Device Compromise | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-14837 | Multiple Lenze Products Improper SSH Enable File Signature Verification Allows Low-Privilege Local Attacker to Bypass SSH Controls | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-14354 | Schneider Electric EcoStruxure Cybersecurity Admin Expert Insufficient Credential Protection Allows Authentication Bypass and Unauthorized Credential Modification | 8.7 High | Updated |
| 2026-07-30 | CVE-2026-14169 | ads-tec Industrial IT DVG-IRF Incorrect Behavior Order Allows Low-Privilege Remote Attacker to Overwrite Existing User Passwords | 8.1 High | Updated |
| 2026-07-30 | CVE-2026-14168 | ads-tec Industrial IT DVG-IRF Missing Authorization at Configuration Table Insertion Path Grants Low-Privileged Users Full Administrator Access | 8.8 High | Updated |
| 2026-07-30 | CVE-2026-14167 | ads-tec Industrial IT DVG-IRF Router Incorrect Authorization Lets Low-Privileged Remote Users Make Administrator-Level Configuration Changes | 8.8 High | Updated |
| 2026-07-30 | CVE-2026-12927 | Schneider Electric IGSS Definition Out-of-Bounds Write in Malicious CGF File Import Risks Arbitrary Code Execution | 8.4 High | Updated |
| 2026-07-30 | CVE-2026-0667 | Schneider Electric SCADAPack Failure to Handle Unusual Communication Conditions Risks Arbitrary Code Execution and Full Data Loss | 9.3 Critical | Updated |
| 2026-07-28 | CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem Management Plane Executes Injected OS Commands; CISA's July 30th KEV Deadline Has Passed for Covered Entities | 10.0 Critical | KEV |
| 2026-07-24 | CVE-2026-5726 | Delta ASDA-Soft Stack-Based Buffer Overflow Allows Code Execution via Malicious File | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-44469 | CODESYS Development System Administrative Installer Extracts Files to World-Writable Temp Directory, Enabling TOCTOU Privilege Escalation | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-44468 | CODESYS Development System Administrative Installer Creates Directory with Insecure Default Permissions | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-31790 | Siemens SIMATIC CN 4100 OpenSSL RSASVE Key Encapsulation Sends Uninitialized Memory Contents to Peers | 7.5 High | Updated |
| 2026-07-24 | CVE-2026-31789 | Siemens SIMATIC CN 4100 OpenSSL 32-Bit Heap Buffer Overflow When Converting Excessively Large OCTET STRING to Hexadecimal | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2026-31403 | Linux Kernel NFSD Network Reference Not Held for Full /proc/fs/nfs/exports Lifetime on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-31402 | Linux Kernel NFSv4.0 LOCK Replay Cache Heap Overflow Corrupts Memory on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2026-31389 | Linux Kernel SPI Controller Registration Failure Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-28387 | Siemens SIMATIC CN 4100 OpenSSL DANE TLSA Use-After-Free in Uncommon Server Authentication Configuration | 8.1 High | Updated |
| 2026-07-24 | CVE-2026-23457 | Linux Kernel SIP Content-Length Integer Truncation in nf_conntrack on Siemens SIMATIC S7-1500 MFP | 8.6 High | Updated |
| 2026-07-24 | CVE-2026-23456 | Linux Kernel netfilter H.323 Conntrack Out-of-Bounds Read in DecodeQ931 Integer Decode on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-07-24 | CVE-2026-23455 | Linux Kernel H.323 Conntrack DecodeQ931 Reads Past Zero-Length UserUserIE Field on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-07-24 | CVE-2026-23454 | Linux Kernel MANA Network Driver Use-After-Free in HWC Channel Teardown Reordering on Siemens SIMATIC S7-1500 MFP | 7.0 High | Updated |
| 2026-07-24 | CVE-2026-23434 | Linux Kernel NAND Flash Lock/Unlock Not Serialized Against Other NAND Operations on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-07-24 | CVE-2025-15620 | Belden HiOS Switch Platform Web Interface Denial of Service via Unauthenticated Request Allows Remote Attacker to Trigger Device Reboot | 8.6 High | Updated |
| 2026-07-24 | CVE-2025-14859 | Semtech LR11xx LoRa Transceiver Secure Boot Uses Non-Standard Hashing Algorithm That Weakens Firmware Authentication | 7.0 High | Updated |
| 2026-07-24 | CVE-2024-14034 | Belden Hirschmann HiEOS LRS11 HTTP Management Module Authentication Bypass Grants Unauthenticated Attackers Administrator Access | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2024-14033 | Belden Hirschmann EagleSDV TLS Session Establishment Denial of Service via Protocol Downgrade Exploit | 7.5 High | Updated |
| 2026-07-24 | CVE-2023-7343 | Belden Hirschmann Industrial HiVision Arbitrary Code Execution Triggered When Administrator Opens Maliciously Crafted Project File | 7.8 High | Updated |
| 2026-07-24 | CVE-2023-7342 | Belden HiSecOS EAGLE Web Server Prior to 04.1.00 Privilege Escalation Allows Operator or Auditor to Gain Administrator Access | 8.8 High | Updated |
| 2026-07-24 | CVE-2022-4987 | Belden Hirschmann Industrial HiVision External Application Execution Flaw Allows Local Attacker to Escalate Privileges | 7.3 High | Updated |
| 2026-07-24 | CVE-2022-4986 | Belden Hirschmann EagleSDV Denial of Service During TLS 1.0/1.1 Session Establishment via Crafted Handshake | 7.5 High | Updated |
| 2026-07-24 | CVE-2021-4477 | Belden Hirschmann HiLCOS OpenBAT IPv6 IPsec Firewall Bypass Allows Traffic from VPN Connections to Evade Configured Rules | 9.1 Critical | Updated |
| 2026-07-24 | CVE-2020-37216 | Belden Hirschmann HiOS Devices Prior to 08.1.00 Crash on Improper EtherNet/IP Packet Length Handling | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-8047 | CODESYS Runtime HTTP Request Length Check Flaw Enables Unauthenticated Remote Out-of-Bounds Write and Denial of Service | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-8046 | CODESYS Runtime Insufficient Authorization on User Account Deletion Allows Low-Privilege Remote User to Delete Any User | 8.1 High | Updated |
| 2026-07-23 | CVE-2026-54420 | LiteSpeed's cPanel Plugin Follows Symlinks Across Security Boundaries to Escalate Privileges; CISA's June 18th KEV Remediation Window Has Closed for Covered Entities | 8.5 High | KEV |
| 2026-07-23 | CVE-2026-46749 | Siemens SINEC INS Hardcoded Static Salt in Password Hashing Shared Across All Users Weakens Stored Credential Security | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-46748 | Siemens SINEC INS Binary with cap_dac_override Capability Set Allows Low-Privilege User to Read or Write Arbitrary Files | 8.8 High | Updated |
| 2026-07-23 | CVE-2026-46746 | Siemens SINEC INS sftp Upload API Unsanitized Input Allows Authenticated Remote Users to Inject OS Commands | 8.8 High | Updated |
| 2026-07-23 | CVE-2026-42542 | TDengine taosd Integer Underflow in RPC Handler Lets Unauthenticated Attackers Crash the Server With One Packet | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-24349 | Siemens SIMATIC WinCC Unified PC Runtime Stores Sensitive Information in Cleartext in Configuration Files | 7.1 High | Updated |
| 2026-07-22 | CVE-2026-41032 | Phoenix Contact CHARX SEC Controller Log Files Downloadable by Adjacent Unauthenticated Attacker, Disclosing Restricted Information | 7.5 High | Updated |
| 2026-07-22 | CVE-2026-35085 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in gdv-serverconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35084 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in dali-devconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35083 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in bac-serverconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35082 | MBS Universal Gateway ugw-logread Method Allows Authenticated Remote Users to Read Arbitrary Local Files | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35081 | MBS Universal Gateway ugw-logstop Method Allows Authenticated Remote Users to Terminate Arbitrary System Processes | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35080 | MBS Universal Gateway ugw-restoreinfo Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35079 | MBS Universal Gateway ugw-restore Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35078 | MBS Universal Gateway ugw-logstop Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35077 | MBS Universal Gateway ugw-delete-file Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35076 | MBS Universal Gateway bac-scanresult Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35075 | MBS Universal Gateway Default Hard-Coded Password Recoverable from Firmware Image Allows Full Unauthenticated Access | 9.8 Critical | Updated |
| 2026-07-22 | CVE-2026-14448 | MB Connect Line Remote Portal OS Command Injection in Certificate Management View Exploitable by High-Privilege Remote Attacker | 7.2 High | Updated |
| 2026-07-22 | CVE-2025-14774 | ABB T-MAC Plus Incorrect Authorization Allows Adjacent Unauthenticated Attacker to Cause Denial of Service | 7.4 High | Updated |
| 2026-07-22 | CVE-2025-14773 | ABB T-MAC Plus Cross-Site Scripting Vulnerability Allows Authenticated Low-Privilege Attacker to Execute Malicious Scripts | 8.0 High | Updated |
| 2026-07-22 | CVE-2025-14772 | ABB T-MAC Plus Authorization Bypass via User-Controlled Key Allows Authenticated Users to Access Other Users' Resources | 8.8 High | Updated |
| 2026-07-22 | CVE-2025-14771 | ABB T-MAC Plus Exposes Sensitive Files and Directories to External Network Access | 9.9 Critical | Updated |
| 2026-07-22 | CVE-2024-14036 | Dräger Core 1.0.5 and M540 Converter Service Denial of Service via Specially Crafted Unencrypted Network Packets | 7.5 High | Updated |
| 2026-07-22 | CVE-2022-4992 | Dräger Infinity Acute Care System and M540 Patient Monitors Network Message Handling Flaw Risks Data Integrity Across Multiple Software Versions | 8.6 High | Updated |
| 2026-07-22 | CVE-2021-4481 | Dräger Protector Software Insecure File System Permissions Allow Local Attacker to Execute Arbitrary Code with System-Level Privileges | 8.2 High | Updated |
| 2026-07-22 | CVE-2021-4480 | Dräger Protector Software Insecure File System Permissions Allow Local Attacker to Execute Arbitrary Code with Elevated Privileges | 8.2 High | Updated |
| 2026-07-22 | CVE-2021-4478 | Dräger CC-Vision Basic and E-Cal Out-of-Bounds Write on Loading Crafted GDT File Can Cause Buffer Overflow | 8.2 High | Updated |
| 2026-07-22 | CVE-2019-25722 | Dräger SC Patient Monitoring Devices Contain Hard-Coded Plaintext Credentials and Local Denial-of-Service Vulnerability in Source Code | 7.6 High | Updated |
| 2026-07-22 | CVE-2019-25719 | Dräger Infinity Acute Care System and M540 Patient Monitors Contain Network Message Handling Vulnerabilities Affecting Confidentiality and Integrity | 8.6 High | Updated |
| 2026-07-22 | CVE-2019-25718 | Dräger Infinity Explorer C700 Kiosk Mode Escape Allows Privilege Escalation to Underlying Operating System | 8.4 High | Updated |
| 2026-07-21 | CVE-2018-25237 | Belden Hirschmann HiSecOS Classic Firewall HTTPS Login Buffer Overflow with RADIUS Authentication Allows Remote Crash | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2018-25236 | Belden Hirschmann HiOS and HiSecOS Products HTTP Management Module Authentication Bypass Allows Unauthenticated Remote Access | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20238 | Belden Hirschmann Industrial HiVision 06.0.00/07.0.00 Improper Authorization Allows Read-Only Users to Gain Write Access to Managed Devices | 7.1 High | Updated |
| 2026-07-21 | CVE-2017-20237 | Belden Hirschmann Industrial HiVision Prior to 06.0.07 Authentication Bypass in Master Service Allows Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20236 | ProSoft Technology ICX35-HWC Cellular Gateway Web Interface Input Validation Flaw Allows Unauthenticated Remote OS Command Injection | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20235 | ProSoft Technology ICX35-HWC Cellular Gateway Web Interface Authentication Bypass Grants Unauthenticated Attackers Administrator Access | 9.1 Critical | Updated |
| 2026-07-21 | CVE-2017-20234 | Belden GarrettCom Magnum 6K/10K Managed Switches Hard-Coded Authentication String Allows Unauthenticated Admin Access | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2016-15058 | Belden Hirschmann HiLCOS Classic Platform Stores User Passwords in Recoverable Format, Exposing Credentials to Adjacent Unauthenticated Attackers | 8.1 High | Updated |
| 2026-07-21 | CVE-2015-10148 | Belden Hirschmann HiLCOS Devices Shipped with Hardcoded SSH and SSL Keys That Cannot Be Changed | 8.2 High | Updated |
| 2026-07-15 | CVE-2026-8314 | Rockwell Automation Arena Simulation Memory Corruption in siman.exe Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8313 | Rockwell Automation Arena Simulation Memory Corruption in linker.exe Siman Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8312 | Rockwell Automation Arena Simulation Memory Corruption in expmt.exe Siman Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8085 | Rockwell Automation Arena Simulation Memory Corruption in model.exe Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-56451 | Siemens Opcenter X Skips JWT Algorithm Validation, Letting Unauthenticated Attackers Forge Arbitrary Tokens and Bypass Authentication; CVSS 10.0 | 10.0 Critical | Updated |
| 2026-07-15 | CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Access Control Allows an Authorized Attacker to Elevate Privileges Locally; CISA's July 28th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-07-15 | CVE-2026-54429 | Siemens SIMATIC S7-PLCSIM Advanced High-Volume Multicast Traffic Exhausts Device Memory, Causing Denial of Service | 7.4 High | Updated |
| 2026-07-14 | CVE-2026-9653 | Rockwell Automation 1756-EN2 and EN3 CIP Implicit Connection Validation Flaw Allows Network Attacker to Cause Denial of Service | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-9650 | Schneider Electric EasyLogic T150/Saitel DR Credentials Stored in Filesystem Accessible to Unauthenticated Attackers | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-9636 | Rockwell Automation ControlLogix and CompactLogix CIP Security Certificate Revocation Check Flaw Allows Revoked Certificates to Authenticate | 8.2 High | Updated |
| 2026-07-14 | CVE-2026-9292 | Rockwell Automation FactoryTalk DataMosaix Private Cloud Stored Cross-Site Scripting in Workflows Configuration Requires Admin Interaction | 8.4 High | Updated |
| 2026-07-14 | CVE-2026-9140 | Rockwell Automation 1718/1719-AENTR I/O Module UDP Unicast Network Storm Causes Device to Lose Communication | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-5928 | GNU C Library ungetwc Multibyte Encoding Overlap Flaw Affects Siemens SIMATIC S7-1500 MFP and Multiple Vendor Products | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-5450 | GNU C Library scanf Heap Buffer Overflow on Wide Character Match with Large Format Width Affects Siemens SIMATIC S7-1500 MFP and Other Products | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-5435 | GNU C Library Deprecated DNS Print Functions Ignore Caller Buffer Length, Affecting Siemens SIMATIC S7-1500 MFP and Related Vendor Products | 7.3 High | Updated |
| 2026-07-14 | CVE-2026-46174 | Linux Kernel AMD Zen2 Op Cache Improper Resource Isolation on Siemens SIMATIC S7-1500 MFP Enables Cross-Process Leakage | 8.8 High | Updated |
| 2026-07-14 | CVE-2026-43057 | Linux Kernel IPv6 Tunneled Traffic Checksum GSO Fallback Incorrectly Handled on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-43040 | Linux Kernel IPv6 NDISC Router Advertisement User Option Leaves Padding Fields Uninitialized on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-43033 | Linux Kernel authencesn Out-of-Place Decryption Writes hiseq at Wrong Destination on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-43030 | Linux Kernel BPF Verifier Incorrect Packet Pointer Safety Check on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-43028 | Linux Kernel netfilter x_tables Name Null-Termination Gap Risks Out-of-Bounds Read on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-43027 | Linux Kernel netfilter CT Helper Pass-Through on Expect Cleanup on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-43025 | Linux Kernel netfilter ctnetlink Helper Out-of-Bounds Read on New Expectations on Siemens SIMATIC S7-1500 MFP | 7.3 High | Updated |
| 2026-07-14 | CVE-2026-43011 | Linux Kernel X.25 Socket Double-Free of skb on Memory Allocation Failure on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31768 | Linux Kernel TI ADC SPI Read Uses Non-DMA-Safe Stack Buffer on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31761 | Linux Kernel IIO Gyro MPU3050 Device Registration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31682 | Linux Kernel Bridge Neighbor Discovery Sends ND Options Parsing Without Linearizing skb First on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-07-14 | CVE-2026-31680 | Linux Kernel IPv6 Flow Label Exclusive Option Freed Before RCU Teardown on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31674 | Linux Kernel IPv6 Routing Match addrnr Exceeding IP6T_RT_HOPS Causes Out-of-Bounds Read on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-31669 | Linux Kernel MPTCP slab-use-after-free in __inet_lookup_established via Lockless ehash Table Walk on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31665 | Linux Kernel nftables CT Timeout Object Use-After-Free on Destroy on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31649 | Linux Kernel stmmac Ethernet Chain Mode Integer Underflow on Jumbo Frame Transmission on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31563 | Linux Kernel MACB Network Driver Frees TX sk_buff in IRQ-Disabled Context Using Wrong Function on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-31533 | Linux Kernel TLS Encryption EBUSY Error Path Use-After-Free on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31508 | Linux Kernel Open vSwitch Teardown Releases Network Device Before Completion on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31507 | Linux Kernel SMC double-free of smc_spd_priv When tee() Duplicates Splice Pipe Buffer on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31504 | Linux Kernel PACKET Socket Fanout Use-After-Free via NETDEV_UP Race in packet_release on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31494 | Linux Kernel MACB Ethernet Driver Queue Statistics Array Size Mismatch on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31485 | Linux Kernel SPI FSL LPSPI Teardown Order Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31469 | Linux Kernel virtio_net Use-After-Free in Destination Route on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31452 | Linux Kernel ext4 Inline-to-Extents Conversion Missing When Truncation Exceeds Inline Data Size on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31450 | Linux Kernel ext4 jinode Published Before Initialization Completes on Siemens SIMATIC S7-1500 MFP | 8.8 High | Updated |
| 2026-07-14 | CVE-2026-31448 | Linux Kernel ext4 mkdir/mknod Logical to Physical Block Mapping Infinite Loop via Residual Data on Siemens SIMATIC S7-1500 MFP | 9.4 Critical | Updated |
| 2026-07-14 | CVE-2026-31447 | Linux Kernel ext4 Rejects Mount of bigalloc Filesystems with s_first_data_block Not Zero on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31417 | Linux Kernel X.25 Packet Fragment Length Integer Overflow on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-31414 | Linux Kernel netfilter Conntrack Expectation Helper Name Resolved from Wrong Source on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31396 | Linux Kernel MACB Network Driver PTP Clock Use-After-Free on Interface Open and Close on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-25789 | Siemens SIMATIC S7-1500 MFP Web Interface Filename Validation Gap on Firmware Update Page Enables Social Engineering Attack | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-25787 | Siemens SIMATIC S7-1500 MFP Web Interface Stored Cross-Site Scripting in Technology Object Name Field Exploitable by Authenticated Attacker | 9.1 Critical | Updated |
| 2026-07-14 | CVE-2026-25786 | Siemens SIMATIC S7-1500 MFP Web Interface Stored Cross-Site Scripting in PLC Name Field Exploitable by Authenticated Attacker | 9.1 Critical | Updated |
| 2026-07-14 | CVE-2026-23449 | Linux Kernel Network Scheduler TEQL Double-Free with Lockless Qdisc Root on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-12659 | Rockwell Automation FLEX 5000 EtherNet/IP Adapter Improper CIP Packet Exception Handling Causes Denial of Service Requiring Manual Restart | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-10714 | Rockwell Automation FactoryTalk Services Platform JWT Signature Bypass in Okta Web Authentication Allows Attacker to Impersonate Users | 8.8 High | Updated |
| 2026-07-14 | CVE-2026-0265 | Palo Alto Networks PAN-OS Authentication Bypass Affects Siemens RUGGEDCOM APE1808, Scores 8.1 | 8.1 High | Updated |
| 2026-07-14 | CVE-2026-0264 | Critical Palo Alto Networks PAN-OS DNS Heap Overflow Affects Siemens RUGGEDCOM APE1808, Scores 9.8 | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-0262 | Palo Alto Networks PAN-OS Multiple Denial-of-Service Flaws Affect Siemens RUGGEDCOM APE1808 | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-0261 | Palo Alto Networks PAN-OS Command Injection Affects Siemens RUGGEDCOM APE1808, Scores 7.2 | 7.2 High | Updated |
| 2026-07-14 | CVE-2026-0258 | Palo Alto Networks PAN-OS IKEv2 SSRF Affects Siemens RUGGEDCOM APE1808, Scores 9.1 | 9.1 Critical | Updated |
| 2026-07-09 | CVE-2026-54801 | Siemens CPCI85 and SICORE Password Change Accepts New Password Without Verifying Current One | 7.2 High | Updated |
| 2026-07-01 | CVE-2026-9717 | Schneider Electric PowerLogic P7 OS Command Injection in Admin-Privileged Context Allows Unauthorized Command Execution | 7.2 High | Updated |
| 2026-07-01 | CVE-2026-9716 | Schneider Electric PowerLogic P7 NULL Pointer Dereference Renders HMI and Configuration Interface Unavailable via Malformed Requests | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-14193 | Delta DVP80ES300T PLC Improper Array Index Validation Creates Remote Denial-of-Service Exposure | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-12579 | Delta AS228T Authentication Bypass Vulnerability Allows Unauthenticated Access Without Valid Credentials | 7.4 High | Updated |
| 2026-07-01 | CVE-2026-12577 | Delta DVP80ES3 PLC Improperly Implemented Security Check Allows Bypassing Standard Protocol Verification | 8.7 High | Updated |
| 2026-07-01 | CVE-2026-12576 | Delta DVP80ES3 PLC Communication Channel Message Integrity Not Enforced, Allowing Message Substitution | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-12575 | Delta DVP80ES3 PLC Improper Resource Release Creates Remote Denial-of-Service Exposure | 7.5 High | Updated |
| 2026-06-30 | CVE-2026-12578 | Delta DTMSoft Deserialization of Untrusted Data Allows Attacker to Execute Arbitrary Code | 8.4 High | Updated |
| 2026-06-30 | CVE-2026-10763 | Hitachi Energy PROMOD V Uses Unencrypted HTTP for Digipede Server Communication, Exposing Data to Interception | 7.0 High | Updated |
| 2026-06-29 | CVE-2026-44411 | Siemens Solid Edge Uninitialized Pointer Access Parsing PAR Files Can Lead to Code Execution via Malicious File Open | 7.8 High | Updated |
| 2026-06-29 | CVE-2026-22925 | Siemens SIMATIC CN 4100 TCP SYN Flood Exhausts Available Resources and Causes Denial of Service | 7.5 High | Updated |
| 2026-06-29 | CVE-2026-22924 | Siemens SIMATIC CN 4100 Accepts Unlimited Unauthenticated Connections, Enabling Remote Resource Exhaustion and Denial of Service | 9.1 Critical | Updated |
| 2026-06-29 | CVE-2025-40949 | Siemens RUGGEDCOM ROX OS Command Injection Lets Authenticated Administrators Execute Root-Level Commands Across Multiple Platform Generations | 9.1 Critical | Updated |
| 2026-06-29 | CVE-2025-40947 | Siemens RUGGEDCOM ROX Authenticated OS Command Injection Requires Low Privilege and Network Access Across Multiple Platform Generations | 7.5 High | Updated |
| 2026-06-27 | CVE-2024-54013 | Hanwha Vision Network Camera Web Server Request Handling Flaw Exposes Protected Functions to Adjacent Unauthenticated Attackers | 8.8 High | Updated |
| 2026-06-24 | CVE-2026-6866 | Schneider Electric EcoStruxure Panel Server Credentials Revert to Insecure Initial Settings After Rare Event, Disclosing Sensitive Information | 7.5 High | Updated |
| 2026-06-23 | CVE-2026-10521 | MB Connect Line mbconnect24 Hidden Configuration Method Accessible to High-Privilege Attackers Allows Critical Parameter Modification | 7.2 High | Updated |
| 2026-06-22 | CVE-2026-8024 | iba ibaPDA and ibaDatCoordinator Deserialization of Untrusted Data Allows Unauthenticated Remote Attacker to Gain Full System Access | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-8398 | Daemon Tools Lite Contains Embedded Malicious Code; CISA Added It to KEV with a May 30th Deadline That Has Since Passed for Covered Entities | 9.8 Critical | KEV |
| 2026-06-17 | CVE-2026-7473 | Arista Extensible Operating System Validation Bypass Added to CISA's Known Exploited Vulnerabilities List; Federal Remediation Window for Covered Entities Closed June 23rd | 5.8 Medium | KEV |
| 2026-06-17 | CVE-2026-6888 | Advantech SaaS Composer Authenticated Admin SQL Injection Allows Remote Command Execution via Specific API Interface | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-6865 | Schneider Electric EasyLogic T150 Path Traversal in User-Supplied Input Allows Unauthorized Access to Sensitive Files | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-6332 | Schneider Electric EcoStruxure Machine Expert HVAC Stores Sensitive Source Code in Cleartext, Risking Disclosure of Protected Intellectual Property | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-5416 | Turck Managed Ethernet Switch OS Command Injection via Name Parameter Exploitable by Low-Privilege Remote Attacker | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-5387 | AVEVA Pipeline Simulation 2025 Allows Unauthenticated Access to Instructor and Simulator Developer Administrative Operations | 9.3 Critical | Updated |
| 2026-06-17 | CVE-2026-4827 | Schneider Electric Easergy MiCOM C264 Insufficient Session Token Entropy Allows Network Attacker to Compromise Sessions | 8.7 High | Updated |
| 2026-06-17 | CVE-2026-48027 | Nx Console Developer Tooling Published Packages Contain Embedded Malicious Code; CISA's June 10th KEV Mandate for Covered Entities Has Passed | 9.8 Critical | KEV |
| 2026-06-17 | CVE-2026-45321 | TanStack JavaScript Library Suite Added to CISA's Known Exploited Vulnerabilities Catalog; Federal Remediation Deadline for Covered Entities Was June 10th | 9.6 Critical | KEV |
| 2026-06-17 | CVE-2026-44412 | Siemens Solid Edge Stack-Based Buffer Overflow Parsing PAR Files Allows Code Execution via Malicious File Open | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-41551 | Siemens ROS# Path Traversal in User-Supplied Input Allows Unauthenticated Remote Attacker to Read or Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-06-17 | CVE-2026-40852 | MB Connect Line mbNET/mbNET.rokey High-Privilege Config Generator OS Command Injection via Unsanitized Config Value | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-40851 | MB Connect Line mbNET/mbNET.rokey USB Config File Parser Confusion Attack Allows Local Attacker to Achieve Code Execution | 8.4 High | Updated |
| 2026-06-17 | CVE-2026-40850 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getAccountData Function Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40836 | MB Connect Line and Helmholz Remote Portal SQL Injection in inmessage Model DELETE Command Allows Low-Privilege Database Access | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40834 | MB Connect Line and Helmholz Remote Portal SQL Injection in dash_layout.php Dashboard Layout Function Exposes Database to Low-Privileged Attackers | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40833 | MB Connect Line and Helmholz Remote Portal SQL Injection in Dashboard Layout Function Exposes Database to Low-Privileged Remote Users | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40819 | MB Connect Line Remote Portal Unauthenticated SQL Injection in sync_data24 Task Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40818 | MB Connect Line Remote Portal Unauthenticated SQL Injection in _mb24confi_getDevice Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40817 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getAlarmProfiles Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40816 | MB Connect Line Remote Portal Unauthenticated SQL Injection in Alarm Configuration Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40815 | MB Connect Line Remote Portal Unauthenticated SQL Injection in _mb24api_getUserAccount Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40814 | MB Connect Line Remote Portal Unauthenticated SQL Injection in dataapi.php _mb24confi_getTagAlarm Function Exposes Database | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40813 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getLiveValues tagid Parameter Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40812 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getLiveValues sn Parameter Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40811 | MB Connect Line Remote Portal Unauthenticated SQL Injection in ssoabstractservice SELECT Command Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40810 | MB Connect Line Remote Portal Unauthenticated SQL Injection in userinfo Endpoint Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33893 | Siemens Teamcenter Hard-Coded Credentials in Multiple Versions Allow Unauthenticated Remote Access to Sensitive Data | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33892 | Siemens Industrial Edge Management Authentication Sequence Weakness Allows Unauthorized Actions via Phishing in Affected Versions | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-33862 | Siemens Teamcenter Cross-Site Scripting Requires Low-Privilege Attacker and User Interaction, Risks Full Session Compromise | 7.3 High | Updated |
| 2026-06-17 | CVE-2026-33616 | MB Connect Line mbconnect24 Blind SQL Injection in mb24api Endpoint Gives Unauthenticated Attackers Full Database Read Access | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33615 | MB Connect Line mbconnect24 Unauthenticated SQL Injection in setinfo Endpoint Allows Arbitrary Data Write via UPDATE Command | 9.1 Critical | Updated |
| 2026-06-17 | CVE-2026-33614 | MB Connect Line mbconnect24 Unauthenticated SQL Injection in getinfo Endpoint Exposes Full Database via SELECT Command | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33613 | MB Connect Line mbconnect24 Admin-Authenticated OS Command Injection in generateSrpArray Function Allows Full System Compromise | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-3323 | Vega vegapuls Level Sensor Unsecured Configuration Interface Exposes Hashed Credentials and Access Codes to Unauthenticated Remote Attackers | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-27668 | Siemens RUGGEDCOM CROSSBOW Secure Access Manager User Administrators Can Administer Groups They Belong To, Enabling Privilege Escalation | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-27662 | Siemens SIMATIC HMI Unified Comfort Panel Web Browser Accessible Without Authentication When No Security Mechanism Is Configured | 7.7 High | Updated |
| 2026-06-17 | CVE-2026-25654 | Siemens SINEC NMS Password Reset Request Authorization Not Validated, Allowing Authenticated User to Reset Any Account Password | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-24032 | Siemens SINEC NMS UMC Authentication Weakness Allows Forged User Identity Due to Insufficient Validation | 7.3 High | Updated |
| 2026-06-17 | CVE-2026-1952 | Delta Electronics AS320T Denial of Service via Undocumented Subfunction Call, Exploitable Remotely Without Authentication | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1951 | Delta Electronics AS320T Stack-Based Buffer Overflow Due to Missing Directory Name Length Check, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1950 | Delta Electronics AS320T Stack-Based Buffer Overflow Due to Missing File Name Length Check, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1949 | Delta Electronics AS320T GET/PUT Request Handler Incorrectly Calculates Stack Buffer Size, Enabling Unauthenticated Remote Code Execution via the Web Service | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-11317 | Rockwell Automation CompactLogix and ControlLogix Crafted CIP Message Fault Causes Denial of Service Requiring Device Restart | 8.7 High | Updated |
| 2026-06-17 | CVE-2026-10829 | Moxa NPort W2150A-W4/W2250A-W4 Series Stack-Based Buffer Overflow from Insufficient Input Validation Allows Unauthenticated Remote Exploitation | 8.6 High | Updated |
| 2026-06-17 | CVE-2026-10825 | Moxa NPort 6000-G2 Series WebSocket API JSON Request Handling Flaw Allows Low-Privilege Authenticated Attacker to Cause Denial of Service | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-0647 | Rockwell Automation FLEX I/O 1794-AENTR Adapter Web Server Missing Authentication Allows Unauthenticated Attacker to Change Web Interface Password | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-0646 | Rockwell Automation FLEX I/O 1794-AENTR Adapter Improper CIP Protocol Memory Handling Causes Adapter Fault and Communication Loss | 8.7 High | Updated |
| 2026-06-17 | CVE-2025-41670 | Phoenix Contact AXC F PLC Runtime User-Writable Configuration Files Allow Low-Privilege Local User to Influence Privileged Service Behavior | 7.8 High | Updated |
| 2026-06-17 | CVE-2025-41669 | Phoenix Contact AXC F PLC PLCnext Store App Installation Lacks Data Verification, Allowing Low-Privilege Remote Engineer to Install Unsigned Applications | 8.8 High | Updated |
| 2026-06-17 | CVE-2025-40946 | Siemens blueplanet Solar Inverter Hard-Coded Credentials Allow Adjacent Unauthenticated Attacker to Compromise Device | 8.3 High | Updated |
| 2026-06-17 | CVE-2025-40899 | Nozomi Networks Guardian Stored Cross-Site Scripting in Assets/Nodes Custom Fields Allows Low-Privilege Authenticated Attacker to Execute Scripts | 8.9 High | Updated |
| 2026-06-17 | CVE-2025-40897 | Nozomi Networks Guardian Threat Intelligence Access Control Flaw Lets View-Only Authenticated Users Modify Records | 8.1 High | Updated |
| 2026-06-17 | CVE-2024-43384 | Phoenix Contact mGuard Firewall Improper Removal of Sensitive Information Before Storage Exposes Root Password to Low-Privilege Remote User | 8.0 High | Updated |
| 2026-06-17 | CVE-2024-1490 | WAGO PLC OpenVPN Configuration via Web Management Allows Authenticated High-Privilege Attacker to Execute Arbitrary Code | 7.2 High | Updated |
| 2026-06-17 | CVE-2023-3634 | Festo MSE6 Undocumented Test Mode Functions Exploitable by Authenticated Low-Privilege Remote Attacker for Full Data Loss | 8.8 High | Updated |