EPICS Base

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

Hitachi Energy TRO600 series products

SUMMARY Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution RCE to carry out further attacks and disclosure of sensitive information. Please refer to the...

Hitachi Energy CoreTec Product

SUMMARY Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer...

Siemens Mendix SAML Module

SUMMARY Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and...

HAPI FHIR

RISK EVALUATION SmileCDR HAPI FHIR contains multiple vulnerabilities. In the worst case, a user could read or write content in a tenant partition that they should not have access to, or an unauthenticated user could trigger a denial-of-service. 2. RECOMMENDED PRACTICES Update to most recent...

AgentZero XSS

RISK EVALUATION The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any injected JavaScript is executed in the context of the victim’s authenticated Agent Zero Web UI...

InterSystems Corporation InterSystems IRIS for Health

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

Kiloview E3 NDI Encoder

ADVISORY SUMMARY Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all...

PHP insecure error handling and state management

RISK EVALUATION PHP insecurely handles multiple combinations of memory allocations and error conditions. These behaviors can allow a remote attacker to cause a denial of service or execute arbitrary code. Successful exploitation depends on a number of factors including the specific PHP...

Moxa AIG-302 ThingsPro Edge

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure...

HMS Networks PEAK-System PCAN Windows drivers

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could crash the Windows kernel. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or...

Guangzhou Juan IoT Technology EseeCloud

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for...

J4Care dcm4che

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA...

Thermo Fisher Torrent Suite Software

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

Eclipse Foundation Eclipse Milo

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code CVE-2023-4863, bypass authentication CVE-2026-16436 and CVE-2026-16437, or perform arbitrary operations CVE-2026-16438, resulting in information disclosure, tampering with,...

Siemens Software Center

SUMMARY The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the...

Inductive Automation Ignition Software

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

Swann Communications SWIFI-SE2KIC

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

Siemens Industrial Edge Device Kit

SUMMARY Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices for Siemens Industrial Edge devices see Additional Information. Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated...

Siemens APOGEE, TALON and Desigo PXC/PXM Products

SUMMARY The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest...

Siemens RUGGEDCOM CROSSBOW Station Access Controller

SUMMARY RUGGEDCOM CROSSBOW Station Access Controller SAC contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM...

Siemens WinCC

SUMMARY Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and...

Siemens RUGGEDCOM CROSSBOW

SUMMARY RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations...

Siemens SIMATIC IPCs

SUMMARY The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products...

Siemens PSS(R)SINCAL

SUMMARY PSSRSINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle...

Siemens SENTRON 3NA COM Fuse

SUMMARY SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service DoS condition. Successful exploitation may require the affected network to be re-established to restore normal...

Siemens RUGGEDCOM APE1808 Devices

SUMMARY Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information. 2. GENERAL...

Siemens Industrial Edge Devices

SUMMARY Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest...

Siemens SIMATIC S7-1500 TM MFP

SUMMARY Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available. 2. GENERAL RECOMMENDATIONS As a general security...

Siemens SIMATIC S7 PLCs Web Server

SUMMARY SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is preparing fixes and recommends...

Siemens SIMATIC S7 Webserver API

SUMMARY .NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Client Library for SIMATIC S7...

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

SUMMARY Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP incl. SIPLUS variant. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not...

Siemens Capital Embedded AR Classic

SUMMARY The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest...

Siemens Industrial Edge App Publisher

SUMMARY The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute...

Grid Protection Alliance openPDC and openHistorian

RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...

Red Lion Controls N-Tron 700 Series - Update A

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by...

Satel Netco Design

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. 2. RECOMMENDED PRACTICES CISA...

CISA Malcolm

RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...

Johnson Controls EasyIO FG

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

Savannah lwIP SMTP client

ADVISORY SUMMARY Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability...

Canimaan Software ClamXAV local privilege escalation

RISK EVALUATION ClamXAV contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. 2. RECOMMENDED PRACTICES Fixed in 3.11.1. 3...

Newell Brands DYMO ID multiple vulnerabilities

RISK EVALUATION Newell Brands DYMO ID contains two vulnerabilities that could capture NTLMv2 credentials or code execution at a victim's privilege level after clicking on a crafted job file. 2. RECOMMENDED PRACTICES Fixed in 1.6.0. 3. DESCRIPTION Newell Brands DYMO ID 1.5.1.71 parses job files...

Cadmos LTI

RISK EVALUATION The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled APPDEBUG=true, APPENV=local in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the entire...

C-Open CANopen stack multiple vulnerabilities

RISK EVALUATION RT-Labs AB C-Open CANopen contains a NULL pointer dereference and a write protection bypass vulnerability. These vulnerabilities can potentially crash the device or allow any CANopen node to overwrite read-only OD entries using two SDO frames. 2. RECOMMENDED PRACTICES Fixed in...

wormhole.app WebRTC TURN relay

RISK EVALUATION Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP. 2. RECOMMENDED PRACTICES...

Joyland AI multiple vulnerabilities

RISK EVALUATION Joyland AI app contains multiple vulnerabilities. In the worst case, an attacker on the same network could intercept traffic and eventually execute arbitrary code, with access to the phone's camera, GPS, microphone, and filesystem. 2. RECOMMENDED PRACTICES No fix available. 3...

Meari IoT Cloud Platform OpenAPI Service (Update A)

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization. 2. RECOMMENDED...

Johnson Controls EasyIO Neo Series EC and CW Controllers

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker tointercept and read sensitive information, including credentials andsession data. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

Johnson Controls EasyIO Neo Series EC and CW Controllers

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...