Milesight Routers - Information Disclosure

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...

CVE-2026-63965

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler bmp580triggerhandler declares its scan buffer on the stack without an initializer and then memcpys 3 bytes of 24-bit sensor data into each 4-byte le32 field. The hig...

EUVD-2026-45703

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the errputbuffers cleanup path of iiohwconsumeralloc, the code was using listforeachentry to iterate through buffers while calling iiobufferput which can free the...

PT-2026-61246

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio buffer enqueue dmabuf iio buffer enqueue dmabuf allocates a struct iio dma fence 104 bytes, kmalloc-128 via kmalloc obj+dma fence init, which sets the initial kref to 1. It then calls dma re...

CVE-2026-15352

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:39+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-03 2026-07-16 23:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsewl6cyb2e...

CVE-2026-8314

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:36+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 09:01:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5h3pkxqd23 2026-07-21 09:01:17+00:00| seen|...

CVE-2026-8313

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:34+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:30:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5ffdinfx2p 2026-07-21 08:30:43+00:00| seen|...

CVE-2026-11889

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:25+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-07...

CVE-2026-57896

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:19+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...

CVE-2026-60140

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:16+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...

CVE-2026-61389

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:14+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...

CVE-2026-60063

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:12+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...

CVE-2026-12659

The CVE-2026-12659 issue affects Rockwell Automation’s Flex 5000® Adapter. It is a denial-of-service vulnerability caused by improper handling of exceptional conditions when processing crafted CIP packets sent to the adapter. The impact is a loss of availability in the affected module and I/O, wi...

CVE-2026-9653

The vulnerability CVE-2026-9653 affects Rockwell Automation 1756-EN2, EN3, and ENBT communication modules. It stems from improper validation of CIP Implicit Connection packets, enabling network-remote denial-of-service when an attacker sends crafted packets; device connections recover immediately...

CVE-2026-10573

The vulnerability CVE-2026-10573 affects the 1734 POINT I/O module. The issue arises from improper handling of crafted CIP messages, which can cause the module to enter a faulted state. Exploitation leads to a denial-of-service condition, with the module requiring a restart to recover. Connected ...

EUVD-2026-43602

In OpENer 2.3.0 commit 76b95cf when parsing incoming CIP Common Industrial Protocol network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 a 16-bit signe...

PT-2026-58060

Name of the Vulnerable Software and Affected Versions Rockwell Automation FLEX 5000 adapters affected versions not specified Description A denial-of-service issue occurs due to improper handling of exceptional conditions when processing crafted CIP Common Industrial Protocol packets sent to the...

CVE-2026-51536

In OpENer 2.3.0 commit 76b95cf when parsing incoming CIP Common Industrial Protocol network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 a 16-bit signe...

CVE-2026-2402

creationtimestamp| type| source ---|---|--- 2026-07-09 16:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02...

CVE-2026-2403

creationtimestamp| type| source ---|---|--- 2026-07-09 16:15:14+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02...