CVE-2025-40581

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINE...

CVE-2025-40582

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the...

CVE-2025-40571

A vulnerability has been identified in Mendix OIDC SSO Mendix 10.12 compatible All versions V4.0.1, Mendix OIDC SSO Mendix 9 compatible All versions V3.3.1, Mendix OIDC SSO V4.2 Mendix 10 compatible All versions V4.2.1, Mendix OIDC SSO V4.3 Mendix 10 compatible All versions. The Mendix OIDC SSO...

CVE-2025-30174

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

CVE-2025-40582

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the...

CVE-2025-40582

The CVE-2025-40582 entry concerns Siemens SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client installed. The vulnerability arises from improper sanitization of configuration parameters, enabling a non-privileged local attacker to execute root commands on the device. Affected products ...

CVE-2025-40582

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the...

CVE-2025-40581

The CVE-2025-40581 affects Siemens SCALANCE LPE9403 devices when SINEMA Remote Connect Edge Client is installed. Affected component is the authentication mechanism, with the root cause described as an authentication bypass that permits a local, non-privileged attacker to bypass authentication and...

CVE-2025-30174

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

kernel: smb: Initialize cfid->tcon before performing network ops

In the Linux kernel, the following vulnerability has been resolved: smb: Initialize cfid-tcon before performing network ops Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cacheddirleasebreak and...

kernel: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()

A use-after-free vulnerability exists in the Bluetooth stack of the Linux kernel. The l2capconnect does not return void during the function return, potentially leading to a loss of system availability...

CVE-2025-43567: Improper Neutralization of Input During Web Page Generation

Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containin...

CVE-2025-30316: Improper Neutralization of Input During Web Page Generation

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

CVE-2025-30315: Improper Neutralization of Input During Web Page Generation

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t...

CVE-2025-30314: Improper Neutralization of Input During Web Page Generation

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t...

CVE-2025-40583: Cleartext Transmission of Sensitive Information

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information...

CVE-2025-40582: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the...

CVE-2025-40581: Authentication Bypass Using an Alternate Path or Channel

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINE...

CVE-2025-30176: Out-of-bounds Read

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

CVE-2025-30175: Out-of-bounds Write

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...