CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1495 matches found

ICS•added 2026/02/10 7:0 a.m.•9 views

Yokogawa FAST/TOOLS

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to redirected users to malicious sites, decrypt communications, perform a man-in-the-middle MITM attack, execute malicious scripts, steal files, and perform other various attacks. 2. RECOMMENDED PRACTICES...

5.5AI score

Exploits0References13

Tenable Nessus•added 2026/02/10 12:0 a.m.•7 views

Siemens SCALANCE and RUGGEDCOM Incorrect Authorization (CVE-2025-40567)

The Load Rollback functionality in the web interface of affected products contains an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with guest role to make the affected product roll back configuration changes made by privileged users. This plugin...

7.1CVSS5.9AI score0.00387EPSS

Exploits0References4

NVD•added 2026/02/09 11:16 p.m.•7 views

CVE-2026-25939

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on...

9.3CVSS0.11393EPSS

Exploits1References3

CVE•added 2026/02/09 10:21 p.m.•28 views

CVE-2026-25939

Summary : FUXA is a web-based SCADA/HMI/dashboard. From v1.2.8 to v1.2.10, an authorization bypass allows an unauthenticated, remote attacker to create/modify arbitrary schedulers via the REST endpoint (notably POST/DELETE /api/scheduler), exposing connected ICS/SCADA environments to follow-on ac...

9.3CVSS5.7AI score0.11393EPSS

In wildExploits1References3Affected Software1

Positive Technologies•added 2026/02/09 12:0 a.m.•12 views

PT-2026-7183

Name of the Vulnerable Software and Affected Versions FUXA versions 1.2.8 through 1.2.10 Description FUXA is a web-based Process Visualization software used in SCADA/HMI/Dashboard systems. An authorization bypass allows a remote, unauthenticated attacker to create and modify schedulers. This can...

9.3CVSS5.5AI score0.11393EPSS

Exploits1References18

OSV•added 2026/02/05 12:27 a.m.•7 views

GHSA-VWCG-C828-9822 FUXA Unauthenticated Remote Code Execution via Admin JWT Minting

Note GitHub incorrectly stated this vulnerability is identical to CVE-2025-69970, which describes the fact that authentication is disabled by default. This advisory describes an exploit chain that enables authentication bypass via the heartbeat refresh endpoint when authentication is enabled. Thi...

10CVSS6.3AI score0.00677EPSS

Exploits0References4

ICS•added 2026/01/29 7:0 a.m.•10 views

Rockwell Automation ArmorStart LT

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...

5.9AI score

Exploits0References11

Circl•added 2026/01/27 11:0 a.m.•4 views

CVE-2016-5385

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02 2026-05-07 04:12:29+00:00| seen| https://gist.github.com/alexishida/b71bdf593101e8b985c0fc509c6f04f3...

8.1CVSS6.8AI score0.50427EPSS

Exploits0References2

Circl•added 2026/01/27 11:0 a.m.•14 views

CVE-2022-32089