1914 matches found
CVE-2026-85083
creationtimestamp| type| source ---|---|--- 2026-09-08 16:15:04+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-251-01 2026-09-08 20:00:41+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3muzssabun52n 2026-09-09 14:33:45+00:00| seen|...
Windows Internet Connection Sharing (ICS) Tampering Vulnerability
Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
CVE-2026-72983: Use After Free
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
CVE-2026-72926: Use After Free
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-72964: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...
PT-2026-87844
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
PT-2026-87879
Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At...
PT-2026-87894
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
MINI-G496-XQ25-V68Q
Bulletin has no description...
Rockwell Automation ArmorStart LT
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an attacker to inject malicious scripts that will be executed when other users access the affected page. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...
Pyramid Solutions NetStaX EtherNet/IP Stack
ADVISORY SUMMARY Successful exploitation of this vulnerability could result in memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed. 2. RECOMMENDED PRACTICES CISA recommends...
Tycon Systems TPDIN-Monitor-WEB3
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow for an attacker to perform a man-in-the-middle MitM attack, cause a factory reset, wipe credentials, or retrieve sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...
BAS-Guardian — Updated!
BAS Guardian - Free Building Automation System BAS Security Scanner BAS Guardian is a free, open-source cybersecurity scanning tool that helps facility managers, IT teams, and OT security professionals detect internet-exposed Building Automation Systems BAS, BACnet devices, and HVAC/BMS controlle...
Rockwell Automation FactoryTalk Activation Manager
RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...
CVE-2026-77353
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. Because the input...
CVE-2026-77353 Wallos: iCalendar Injection via CRLF in Subscription Name/Notes Export
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. Because the input...
EUVD-2026-68890
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. Because the input...