| 2026-10-09 | CVE-2026-15688 | Mitsubishi Electric GX Works3 Block Password Validation Bypassed via In-Memory Executable Modification, Letting Local Users View, Tamper with, or Delete Control Programs | 9.2 Critical | Updated |
| 2026-10-08 | CVE-2026-34499 | Johnson Controls ADVMS Embeds a Hard-Coded Cryptographic Key, Exposing Sensitive Key Material to Local Low-Privilege Users on Versions Before 3.10 | 8.5 High | Updated |
| 2026-10-07 | CVE-2026-107194 | Sungrow iSolarCloud login_type Authentication Bypass Enables Account Takeover on Solar Grid Infrastructure, with NVD Citing Potential for Europe-Wide Outages | 9.2 Critical | Updated |
| 2026-10-06 | CVE-2026-98050 | CVE-2026-98050 | 7.5 High | Updated |
| 2026-10-06 | CVE-2026-94293 | Murrelektronik AAS Edge Client All Versions Allow Unauthenticated Remote Attacker to Read and Modify Asset Administration Shell Submodel Data | 9.8 Critical | Updated |
| 2026-10-06 | CVE-2026-79655 | CVE-2026-79655 | 7.8 High | Updated |
| 2026-10-06 | CVE-2026-7507 | CVE-2026-7507 | 7.5 High | Updated |
| 2026-10-06 | CVE-2026-74860 | CVE-2026-74860 | 8.5 High | Updated |
| 2026-10-06 | CVE-2026-7307 | CVE-2026-7307 | 7.5 High | Updated |
| 2026-10-06 | CVE-2026-56211 | Red Hat AI Inference Server 3.3 libaom Remote Code Execution Reachable by Unauthenticated Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-06 | CVE-2026-56210 | Red Hat AI Inference Server 3.3 libaom Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-06 | CVE-2026-56209 | Red Hat AI Inference Server 3.3 libaom Arbitrary Filesystem Write Reachable by Unauthenticated Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-06 | CVE-2026-56208 | Red Hat AI Inference Server 3.3 libaom Buffer Overflow Reachable by Unauthenticated Remote Attackers (CVSS 7.6) | 7.6 High | Updated |
| 2026-10-06 | CVE-2026-4634 | CVE-2026-4634 | 7.5 High | Updated |
| 2026-10-05 | CVE-2026-97185 | CVE-2026-97185 | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-96512 | CVE-2026-96512 | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-92248 | CVE-2026-92248 | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-90948 | CVE-2026-90948 | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-90947 | CVE-2026-90947 | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-89793 | CVE-2026-89793 | 7.8 High | Updated |
| 2026-10-05 | CVE-2026-89058 | CVE-2026-89058 | 7.4 High | Updated |
| 2026-10-05 | CVE-2026-76561 | CVE-2026-76561 | 7.2 High | Updated |
| 2026-10-05 | CVE-2026-64042 | CVE-2026-64042 | 8.8 High | Updated |
| 2026-10-05 | CVE-2026-64041 | CVE-2026-64041 | 7.8 High | Updated |
| 2026-10-04 | CVE-2026-86060 | MikroTik RouterOS's Argument Injection in a Command-Processing Component Allows Unauthenticated Attackers to Execute Arbitrary Commands on the Router; CISA's September 13th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-10-04 | CVE-2026-67276 | MikroTik RouterOS SSH Key Comparison Omits RSA Exponent, Letting an Attacker with a Known Modulus Authenticate as Another User | 8.1 High | EPSS-Imminent |
| 2026-10-04 | CVE-2026-20181 | Cisco Identity Services Engine Authenticated Admin Command Injection Enables Arbitrary OS Command Execution on the Underlying System | 9.1 Critical | EPSS-Imminent |
| 2026-10-03 | CVE-2026-98154 | Linux Kernel nvme-rdma: Failure to Fix -EIO cleanup order in queue_rq | 7.0 High | Updated |
| 2026-10-03 | CVE-2026-98130 | Linux Kernel sctp: Failure to Fix a TOCTOU race in SCTP_CMD_TIMER_START, Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-10-03 | CVE-2026-98122 | Linux Kernel vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-98116 | Linux Kernel ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-98108 | Linux Kernel Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-98096 | Linux Kernel ipv6: sr: restore network header before routing and forwarding, Reachable from the Network Without Credentials (CVSS 7.4) | 7.4 High | Updated |
| 2026-10-03 | CVE-2026-98083 | Linux Kernel btrfs: Failure to Fix transaction use-after-free in raid stripe insertion | 7.0 High | Updated |
| 2026-10-03 | CVE-2026-98070 | Linux Kernel net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks(), Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-10-03 | CVE-2026-98069 | Linux Kernel net/rds: acquire the fastpath locks in rds_conn_shutdown(), Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-10-03 | CVE-2026-98052 | Linux Kernel net: bcmasp: clear txcb->last before writing each descriptor | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-98030 | Linux Kernel net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size | 7.0 High | Updated |
| 2026-10-03 | CVE-2026-98027 | Linux Kernel net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size | 7.0 High | Updated |
| 2026-10-03 | CVE-2026-98023 | Linux Kernel vxlan: reject dynamic fdb entries that reference a nexthop id | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-98017 | Linux Kernel net/sched: defer qdisc freeing after failed creation | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-97991 | Linux Kernel vdpa_sim_blk: reject out-of-range sector starts | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-97990 | Linux Kernel vdpa_sim_net: Failure to Check TX pull result before RX copy | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-97957 | Linux Kernel net: hinic: fix mailbox segment buffer overflow | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-97509 | Linux Kernel thunderbolt: Keep XDomain reference during the lifetime of a service | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-97508 | Linux Kernel thunderbolt: Set tb->root_switch to NULL when domain is stopped | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-97497 | Linux Kernel drm/amdkfd: Failure to Check bounds for allocate_sdma_queue restore_sdma_id | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-97496 | Linux Kernel drm/amdkfd: Failure to Fix OOB memory exposure in get_wave_state() | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-97455 | Linux Kernel ACPICA: Failure to Fix use-after-free in acpi_ds_terminate_control_method() | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-97454 | Linux Kernel ACPICA: Failure to Add boundary checks in acpi_ps_get_next_field() | 7.7 High | Updated |
| 2026-10-03 | CVE-2026-97452 | Linux Kernel ACPICA: Failure to Prevent adding invalid references | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-97451 | Linux Kernel ACPICA: Failure to Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-97450 | Linux Kernel ACPICA: Failure to Validate handler object type in two places | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-97448 | Linux Kernel ACPICA: Failure to Add validation for node in acpi_ns_build_normalized_path() | 7.7 High | Updated |
| 2026-10-03 | CVE-2026-93196 | Linux Kernel nvdimm: virtio_pmem: refcount requests for token lifetime | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-90030 | Linux Kernel usb: dwc3: clear forceRM when issuing EndTransfer | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-90016 | Linux Kernel staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-90013 | Linux Kernel tracing: Take trace_array reference when opening options file | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-90002 | Linux Kernel ftrace: Take trace_array reference before accessing its ftrace_ops | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89972 | Linux Kernel nvme: Failure to Add missing SRCU grace period in error path, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-89971 | Linux Kernel nvme: skip the zoned limits update if the zone info query failed, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-89840 | Linux Kernel f2fs: Failure to Validate MOVE_RANGE destination size | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-89838 | Linux Kernel f2fs: limit recovery filename logging to stored length | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-89832 | Linux Kernel f2fs: Failure to Fix to clear dirty flag on folio in error path | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89806 | Linux Kernel drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-89795 | Linux Kernel PCI: Allow per function PCI slots to fix slot reset on s390 | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-89792 | Linux Kernel ksmbd: Failure to Prevent out-of-bounds reads in share config responses | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-89560 | Linux Kernel landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-89520 | Linux Kernel sched/core: Make core-sched flips wait for in-flight selections | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89503 | Linux Kernel ring-buffer: Failure to Fix subbuf resize race with ring_buffer_alloc_read_page() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89500 | Linux Kernel ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-89452 | Linux Kernel iommu/msm: Unwind probe state on registration failure | 8.4 High | Updated |
| 2026-10-03 | CVE-2026-89445 | Linux Kernel iommufd: Failure to Fix UAF in selftest IOPF reporting | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-89441 | Linux Kernel mmc: via-sdmmc: cancel card-detect work on remove | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-81016 | Linux Kernel platform/x86/amd/pmc: Propagate SMU errors and validate S2D address | 7.7 High | Updated |
| 2026-10-03 | CVE-2026-81015 | Linux Kernel platform/x86/amd/pmc: Failure to Fix LPS0 and debugfs leaks when STB init fails | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-80980 | Linux Kernel net/smc: stop killed, freed and out_of_sync sharing a byte, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-80937 | Linux Kernel wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-80935 | Linux Kernel wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-80926 | Linux Kernel ksmbd: Failure to Fix use-after-free in oplock break notification, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-80726 | Linux Kernel KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (CVSS 9.3) | 9.3 Critical | Updated |
| 2026-10-03 | CVE-2026-80521 | Linux Kernel af_unix: Unlink scc_entry in unix_del_edge() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-76504 | CISA's October 3rd KEV Remediation Deadline for Cisco Catalyst SD-WAN Manager URI Encoding Bypass Has Passed; Covered Entities Still Exposed Are Out of Compliance | 9.8 Critical | KEV |
| 2026-10-03 | CVE-2026-74743 | Linux Kernel macvlan: inherit needed_headroom and needed_tailroom from lowerdev, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-74521 | Linux Kernel ksmbd: Failure to Use memcmp() to compare ClientGUIDs, Reachable Without Authentication (CVSS 9.1) | 9.1 Critical | Updated |
| 2026-10-03 | CVE-2026-74496 | Linux Kernel fou: Failure to Fix use-after-free in fou_create() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-74347 | Linux Kernel netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-74294 | Linux Kernel ASoC: meson: aiu: Validate written enum values | 7.3 High | Updated |
| 2026-10-03 | CVE-2026-74289 | Linux Kernel ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-74258 | Linux Kernel bpf: Guard __get_user acesss with access_ok for uprobe_multi data | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-72496 | Linux Kernel RDMA/bnxt_re: Proper rollback if the ioremap fails (CVSS 9.2) | 9.2 Critical | Updated |
| 2026-10-03 | CVE-2026-72485 | Linux Kernel coresight: platform: defer connection counter increment until alloc succeeds | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-72334 | Linux Kernel Bluetooth: ISO: fix malformed ISO_END/CONT handling | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-68391 | Linux Kernel Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-68287 | Linux Kernel drop_monitor: Failure to Fix size calculations for 64-bit attributes, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-68236 | Linux Kernel drm/amd/display: set new_stream to NULL after release | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-68161 | Linux Kernel sctp: close UDP tunnel sockets during netns teardown, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-68155 | Linux Kernel libceph: Reject monmaps advertising zero monitors, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-03 | CVE-2026-68097 | Linux Kernel ksmbd: Failure to Validate ACE size against SID sub-authorities | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-53359 | Linux Kernel KVM: x86: Fix shadow paging use-after-free due to unexpected role | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-53005 | Linux Kernel AF_UNIX SOCKMAP Redirect Hides Inflight File Descriptors from the Garbage Collector, Leaking Inflight Sockets Indefinitely | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-52988 | Linux Kernel netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase | 7.1 High | Updated |
| 2026-10-03 | CVE-2026-46242 | Linux Kernel eventpoll: Failure to Fix ep_remove struct eventpoll / struct file UAF | 7.8 High | Updated |
| 2026-10-03 | CVE-2026-46113 | Linux Kernel KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 High | Updated |
| 2026-10-03 | CVE-2026-20273 | Cisco IOS XE's Improper Input Validation Allows a Remote Attacker to Trigger a Device Crash or Disruption via a Specially Crafted Input | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20272 | Cisco IOS XE's Injection Flaw Allows Remote Attackers to Execute Arbitrary Commands via a Specially Crafted Input Reaching a Downstream Component | 9.8 Critical | Updated |
| 2026-10-03 | CVE-2026-20271 | Cisco IOS XE's Insufficient Control Flow Management Allows a Remote Attacker to Disrupt Device Operation via a Crafted Packet | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20270 | Cisco IOS XE's Incorrect Calculation Vulnerability Allows a Remote Attacker to Cause an Unrecoverable Device Condition via a Specially Crafted Input | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20269 | Cisco IOS XE's Improper Resource Lifetime Management Allows Remote Attackers to Exhaust Device Resources and Cause a Denial of Service | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20268 | Cisco IOS XE's Improper Restriction of Memory Buffer Operations Allows Remote Attackers to Potentially Execute Code or Crash the Device via a Malformed Packet | 8.6 High | Updated |
| 2026-10-03 | CVE-2026-20267 | Cisco IOS XE's Improper Access Control Allows Network-Based Attackers to Access Protected Functions or Data Without Proper Authorization | 9.0 Critical | Updated |
| 2026-10-03 | CVE-2026-102555 | Red Hat Enterprise Linux 10 libsoup Out-of-Bounds Read Reachable by Unauthenticated Remote Attackers (CVSS 8.2) | 8.2 High | Updated |
| 2026-10-02 | CVE-2026-98163 | Linux Kernel cgroup: Failure to Avoid iteration of dying tasks with zero refcount | 7.0 High | Updated |
| 2026-10-02 | CVE-2026-98115 | Linux Kernel ksmbd: Failure to Safely drain sessions during logoff | 8.8 High | Updated |
| 2026-10-02 | CVE-2026-97415 | Linux Kernel btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-94422 | Red Hat Enterprise Linux 10 Remote Code Execution Reachable by Unauthenticated Remote Attackers (CVSS 8.8) | 8.8 High | Updated |
| 2026-10-02 | CVE-2026-86345 | Red Hat Enterprise Linux 10 389-ds-base Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 9.0) | 9.0 Critical | Updated |
| 2026-10-02 | CVE-2026-86344 | Red Hat Enterprise Linux 10 389-ds-base Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-86326 | Moxa MGate MB3170 Series Security Vulnerability Exploitable by Authenticated Admin Network Attackers (CVSS 8.6) | 8.6 High | Updated |
| 2026-10-02 | CVE-2026-86325 | Moxa MGate MB3170 Series Buffer Overflow Exploitable by Low-Privilege Network Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-84411 | MikroTik RouterOS Remote Code Execution Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-10-02 | CVE-2026-84233 | Red Hat Enterprise Linux 10 rpm Security Flaw Reachable by Unauthenticated Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-10-02 | CVE-2026-75937 | Digi International IX Family Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-71452 | Johnson Controls EasyIO FS32 Command Injection Exploitable by Authenticated Admin Adjacent-Network Attackers (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-71449 | Johnson Controls EasyIO FS32 Security Vulnerability Reachable Without Authentication at CVSS 9.3 | 9.3 Critical | Updated |
| 2026-10-02 | CVE-2026-6893 | Red Hat Enterprise Linux 10 dracut Remote Code Execution Reachable by Unauthenticated Adjacent-Network Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-64893 | Johnson Controls EasyIO NEO Security Vulnerability Exploitable by Low-Privilege Network (High-Complexity Exploit) Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-02 | CVE-2026-64008 | Linux Kernel accel/rocket: Failure to Fix UAF via dangling GEM handle in create_bo | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-64001 | Linux Kernel ALSA: pcm: oss: Fix setup list UAF on proc write error | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-63996 | Linux Kernel ethtool: cmis: require exact CDB reply length | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-63993 | Linux Kernel vxlan: Missing Guard: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu(), Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-02 | CVE-2026-63975 | Linux Kernel Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp | 8.8 High | Updated |
| 2026-10-02 | CVE-2026-63972 | Linux Kernel net: mana: Skip redundant detach on already-detached port, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-63971 | Linux Kernel sctp: Failure to Fix race between sctp_wait_for_connect and peeloff | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-63970 | Linux Kernel vsock/virtio: bind uarg before filling zerocopy skb | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-63622 | Red Hat Enterprise Linux 10 libvirt Arbitrary Filesystem Write Reachable by Low-Privilege Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-58016 | Enterprise Linux GLib Out-of-Bounds Read Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-58014 | Enterprise Linux GLib Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-02 | CVE-2026-55396 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 8.5) | 8.5 High | Updated |
| 2026-10-02 | CVE-2026-55395 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-55393 | Teledyne FLIR Aware2 Path Traversal Reachable Without Authentication at CVSS 10.0 | 10.0 Critical | Updated |
| 2026-10-02 | CVE-2026-5260 | Red Hat OpenShift AI 3.4 libgnutls Heap Overread Reachable by Unauthenticated Remote Attackers (CVSS 8.2) | 8.2 High | Updated |
| 2026-10-02 | CVE-2026-48864 | Enterprise Linux libsolv Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-42013 | Red Hat OpenShift AI 3.4 gnutls Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 8.2) | 8.2 High | Updated |
| 2026-10-02 | CVE-2026-42012 | Red Hat OpenShift AI 3.4 gnutls Information Disclosure Reachable by Unauthenticated Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-02 | CVE-2026-42011 | Red Hat OpenShift AI 3.4 gnutls Authorization Bypass Reachable by Unauthenticated Remote Attackers (CVSS 7.4) | 7.4 High | Updated |
| 2026-10-02 | CVE-2026-42010 | Enterprise Linux gnutls Authorization Bypass Reachable by Low-Privilege Remote Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-02 | CVE-2026-42009 | Enterprise Linux gnutls Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-34494 | Johnson Controls Neo Series MVP2 Unauthenticated Security Vulnerability over Network (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-34493 | Johnson Controls EasyIO FS32 Unauthenticated Security Vulnerability over Network (CVSS 7.2) | 7.2 High | Updated |
| 2026-10-02 | CVE-2026-33846 | Red Hat OpenShift AI 3.4 Buffer Overflow Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-33845 | Enterprise Linux Out-of-Bounds Read Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-18917 | Red Hat Enterprise Linux 10 libvirt Buffer Overflow Reachable by Low-Privilege Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-17615 | Red Hat Enterprise Linux 8 RESTEasy's Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-17523 | Linux Kernel can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-16529 | Red Hat Enterprise Linux 10 Integer Overflow Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-16527 | Red Hat Enterprise Linux 10 Remote Code Execution Reachable by Unauthenticated Remote Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-02 | CVE-2026-16526 | PCP linux_sockets module unsecured internal connection allows local code execution attacker to escalate to root | 8.8 High | Updated |
| 2026-10-02 | CVE-2026-16524 | PCP linux_sockets PMDA command injection via network.persocket.filter metric allows arbitrary command execution as PMDA user | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-16118 | Red Hat OpenShift AI 3.3 xdgmime Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-02 | CVE-2026-15816 | Red Hat Enterprise Linux 10 dracut Security Flaw Reachable by Unauthenticated Adjacent-Network Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-14984 | Teledyne FLIR Aware2 Security Vulnerability Reachable by Adjacent Unauthenticated Attackers (CVSS 9.4) | 9.4 Critical | Updated |
| 2026-10-02 | CVE-2026-14983 | Teledyne FLIR Aware2 Denial of Service Reachable by Adjacent Unauthenticated Attackers (CVSS 7.1) | 7.1 High | Updated |
| 2026-10-02 | CVE-2026-14164 | Red Hat OpenShift AI 3.4 Double-Free Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-10-02 | CVE-2026-12912 | Red Hat OpenShift AI 3.4 libtiff Buffer Overflow Reachable by Low-Privilege Local Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-10-02 | CVE-2026-104988 | Red Hat Enterprise Linux 10 Dogtag Security Flaw Reachable by Low-Privilege Remote Attackers (CVSS 8.1) | 8.1 High | Updated |
| 2026-10-02 | CVE-2026-102010 | Red Hat Enterprise Linux 10 GCC Use-After-Free Reachable by Unauthenticated Remote Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-10-02 | CVE-2026-10118 | Red Hat AI Inference Server 3.3 Poppler's Out-of-Bounds Write Reachable by Unauthenticated Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-02 | CVE-2026-100075 | Linux Kernel RDMA/srpt: Failure to Fix srpt_alloc_rw_ctxs() unwind counters, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-10-01 | CVE-2026-90949 | Red Hat Enterprise Linux 8 GIMP's Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-10-01 | CVE-2026-88924 | Red Hat Enterprise Linux 10 Arbitrary Filesystem Write Reachable by Low-Privilege Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-10-01 | CVE-2026-84268 | Red Hat Enterprise Linux 10 Remote Code Execution Reachable by Unauthenticated Remote Attackers (CVSS 8.8) | 8.8 High | Updated |
| 2026-10-01 | CVE-2026-69594 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-10-01 | CVE-2026-69576 | Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-10-01 | CVE-2026-69549 | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-10-01 | CVE-2026-69546 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network | 8.1 High | Updated |
| 2026-10-01 | CVE-2026-69541 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-10-01 | CVE-2026-69524 | Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network | 8.1 High | Updated |
| 2026-10-01 | CVE-2026-48710 | Kludex Starlette's HTTP Request Smuggling Vulnerability Allows Network-Adjacent Attackers to Bypass Security Controls and Poison Shared HTTP Connections | 6.5 Medium | KEV |
| 2026-10-01 | CVE-2026-42965 | OpenShift Container Platform Security Flaw Reachable by Low-Privilege Remote Attackers (CVSS 7.7) | 7.7 High | Updated |
| 2026-10-01 | CVE-2026-3012 | Enterprise Linux Samba’s Security Flaw Reachable by Unauthenticated Adjacent-Network Attackers (CVSS 8.0) | 8.0 High | Updated |
| 2026-10-01 | CVE-2026-1784 | OpenShift Container Platform Injection Reachable by Low-Privilege Local Attackers (CVSS 8.8) | 8.8 High | Updated |
| 2026-10-01 | CVE-2026-16313 | Red Hat Enterprise Linux 10 sg3_utils Security Flaw Reachable by Unauthenticated Local Attackers (CVSS 7.6) | 7.6 High | Updated |
| 2026-10-01 | CVE-2025-41753 | WAGO 0751-9x01 Security Vulnerability Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-30 | CVE-2026-91191 | Lantronix G520 Boot Process Disables Firmware Signature Verification, Allowing Unauthorized Software to Pass as Authentic | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-84409 | Lantronix G520 Management Interface Returns Metadata Fetched Over Unencrypted HTTP, Enabling Man-in-the-Middle Attacks on Update Mechanism | 7.5 High | Updated |
| 2026-09-30 | CVE-2026-79625 | CODESYS Runtime Monitoring Race Condition Under Concurrent Client Requests Risks Incorrect Reads, Writes, and Data Corruption | 8.1 High | Updated |
| 2026-09-30 | CVE-2026-76992 | CODESYS Gateway Client Allocates Unbounded Memory from Server-Controlled Size Field, Enabling Unauthenticated Remote Denial of Service | 7.5 High | Updated |
| 2026-09-30 | CVE-2025-53844 | Siemens RUGGEDCOM APE1808 FortiOS Out-of-Bounds Write in Specific Versions Allows Attacker to Execute Unauthorized Code | 8.8 High | Updated |
| 2026-09-30 | CVE-2025-14272 | Rockwell Automation FactoryTalk PavilionX API Improper Authorization Allows Unauthenticated Actors to Execute Privileged Operations | 8.3 High | Updated |
| 2026-09-30 | CVE-2025-13036 | Rockwell Automation FactoryTalk Historian SE Login Endpoint Race Condition Allows Unauthenticated Authentication Token Harvest | 9.2 Critical | Updated |
| 2026-09-30 | CVE-2025-12659 | Siemens Simcenter Femap Memory Corruption on Parsing Specially Crafted IPT Files Enables Code Execution in Current Process | 7.8 High | Updated |
| 2026-09-30 | CVE-2025-11694 | Rockwell Automation 1769 CompactLogix Missing CIP Protocol Sequence Number Validation Enables Denial of Service by Network Attacker | 8.7 High | Updated |
| 2026-09-29 | CVE-2026-8066 | Hitachi Energy RTU500 End-of-Life Firmware Directory Traversal via File Upload Allows Unauthenticated Attacker to Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-29 | CVE-2026-8065 | Hitachi Energy RTU500 End-of-Life Firmware Update Endpoint Bypasses Authentication, Allowing Unauthenticated Arbitrary Firmware Upload | 9.1 Critical | Updated |
| 2026-09-29 | CVE-2026-7395 | Hitachi Energy Asset Suite Exposes Configuration Upload Servlet to Unauthenticated Users Without Network Restrictions | 8.5 High | Updated |
| 2026-09-29 | CVE-2025-7639 | AVEVA Enterprise SCADA Authenticated Operator Can Tamper Serialized Data to Achieve Code Execution Under DNA Apps Security Privileges | 7.1 High | Updated |
| 2026-09-29 | CVE-2025-41770 | Phoenix Contact AXC F PLC PLCnext Engineer Communication Interface Unauthenticated Denial-of-Service Vulnerability | 7.5 High | Updated |
| 2026-09-29 | CVE-2025-41769 | Phoenix Contact AXC F PLC PROFINET Service Buffer Overflow in Default Configuration Allows Unauthenticated Remote Reboot | 9.8 Critical | Updated |
| 2026-09-29 | CVE-2025-12012 | Rockwell Automation CompactLogix and ControlLogix 5370/5570 Can Be Forced into Non-Recoverable Fault via Invalid Project File Write | 9.2 Critical | Updated |
| 2026-09-29 | CVE-2025-12011 | Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Can Be Forced into Non-Recoverable Fault by Invalid Project File Write | 9.2 Critical | Updated |
| 2026-09-29 | CVE-2025-11698 | Rockwell Automation 5380/5480/5580 Controller Boot Firmware Below Version 1.072 Allows Invalid File Writes That Force Non-Recoverable Device Fault | 9.2 Critical | Updated |
| 2026-09-28 | CVE-2026-20263 | Cisco IOS XE BEEP Feature Crashes on a Specific Malformed SOAP Request, Enabling Unauthenticated Remote Denial of Service | 8.6 High | Updated |
| 2026-09-26 | CVE-2026-80152 | Lantronix SLC/EMG/SLB Web Management Services Endpoint Lets Authenticated Users Inject OS Commands as Root | 9.1 Critical | Updated |
| 2026-09-26 | CVE-2026-80151 | Lantronix SLC/EMG/SLB Web Management Services Endpoint Contains a Second Command Injection Path Allowing Root Execution by Authenticated Users | 9.1 Critical | Updated |
| 2026-09-26 | CVE-2026-80150 | Lantronix SLC8000/SLC9000/EMG/SLB882 WebSSH Listener Accepts Unauthenticated Server-Side Request Forgery Targets | 7.5 High | Updated |
| 2026-09-26 | CVE-2026-80149 | Lantronix WebSSH and WebTelnet Server-Side Request Forgery Lets Unauthenticated Attackers Redirect Device Requests to Internal Hosts | 8.6 High | Updated |
| 2026-09-26 | CVE-2026-80148 | Lantronix SLC/EMG/SLB882 WebSSH Listener Processes SSRF Probes From Unauthenticated Callers, Enabling Internal Network Mapping | 8.6 High | Updated |
| 2026-09-26 | CVE-2026-80146 | A Second Lantronix SLC/EMG/SLB Stack Buffer Overflow via Undocumented Interface Allows Authenticated Attackers to Execute Arbitrary Code | 9.9 Critical | Updated |
| 2026-09-26 | CVE-2026-67279 | MikroTik RouterOS Unauthenticated Session Bypass Carries Federal Remediation Deadline of September 28 | 6.5 Medium | KEV |
| 2026-09-26 | CVE-2023-45796 | Pilz PASvisu and PMI v8xx Stored Cross-Site Scripting in Runtime Component Exploitable by Low-Privilege Unauthenticated Remote Attacker | 8.1 High | Updated |
| 2026-09-26 | CVE-2023-45795 | Pilz PASvisu Builder Component Cross-Site Scripting Allows Local Unauthenticated Attacker to Gain Full Device Control | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-76460 | Cisco Identity Services Engine's Incorrect Use of Privileged APIs Allows Unauthenticated Remote Attackers to Gain Full Administrative Control; CISA's September 19th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-25 | CVE-2026-97941 | Linux Kernel SLAB Allocator Optimistic Freelist Return Races Against Concurrent Object Free, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97940 | Linux Kernel IPv6 fib6 Route Walker Use-After-Free on seq Stop Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97937 | Linux Kernel ftrace Function Graph State Initialized After Task Structure Copy, Enabling Local Privilege Escalation on Fork | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97931 | Linux Kernel ALSA us122l mmap Leaves VM_MAYWRITE on Read-Only Mappings, Enabling Privilege Escalation | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97926 | Linux Kernel UFS Filesystem Caches On-Disk Cylinder Group Metadata Without Validation, Enabling Local Memory Corruption | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97911 | Linux Kernel Arm Ethos-U NPU Driver Allows Zero-Size SRAM Job Configuration While Command Stream Still Accesses SRAM | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97910 | Linux Kernel Spreadtrum ASoC Compress Driver Does Not Validate Buffer Sizes Against Fixed Allocations, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97903 | Linux Kernel Process Exit Releases thread_pid Reference Before proc_flush_pid Completes, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97612 | Linux Kernel MPLS Stack Pop Leaves Stale Inner Protocol Record Set by Prior Push, Enabling Local Memory Corruption | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97611 | Linux Kernel Open vSwitch Flow Table Mask Array Retired to RCU Before Last Dereference Completes, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97609 | Linux Kernel Netfilter Connection Timeout Module Unload Unregisters Per-Net Operations Before Clearing Global Hook, Enabling Use-After-Free | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97608 | Linux Kernel Netfilter Logger Teardown Leaves sysctl Exposed After Logger Unregistered but Before Backend Removed | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97602 | Linux Kernel IP Fragment Queue Flushed While Completion State Unchanged Allows Concurrent Fragment to Acquire Lock | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97595 | Linux Kernel 802.15.4 Receiver Queues Beacon Frames Against Interface Being Torn Down, Enabling Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97594 | Linux Kernel Landlock Security Module Reads Parent Directory Without Reference or Lock, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97589 | Linux Kernel s390 Crypto Engine Wrong Async Callback Return Code Causes Request Re-queue Loop, Enabling Denial of Service | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-97584 | Linux Kernel AFS Server Lookup Frees Existing Endpoint State When Cleaning Up Candidate, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97583 | Linux Kernel AFS File Server Leaves Stale Peer App Data After Address List Change, Causing Crash on Reconnect | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97580 | Linux Kernel Rockchip HEVC Decoder Unbounded Tile Loop and Unvalidated PPS ID Enable Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97579 | Linux Kernel MediaTek AV1 Video Decoder Tile Start Array Copy Exceeds Array Capacity, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97578 | Linux Kernel Rockchip VPU981 AV1 Decoder Missing Divisor Guard Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97577 | Linux Kernel Rockchip VPU981 AV1 Decoder Tile Group Entry Indexing Past Array Capacity Enables Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97576 | Linux Kernel V4L2 Stateless HEVC Decoder Uses Unvalidated Tile Counts as Loop Bounds, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97575 | Linux Kernel V4L2 Stateless AV1 Decoder Uses Unvalidated Tile Counts as Array Indices and Loop Bounds, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97573 | Linux Kernel Broadcom bnxt_en Ignores Ring Buffer Allocation Failure During RX Ring Reset, Enabling Local Memory Corruption | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-97570 | Linux Kernel Broadcom bnxt_en TPA ID Indexing Without Software Bound Allows Memory Corruption on High-ID Aggregations | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-97562 | Linux Kernel CIFS DFS Superblock Iterator Stores Raw Pointer Before Reference Acquired, Enabling Race-Condition Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97557 | Linux Kernel CIFS Oplock Break Queue Takes File Reference Unconditionally, Leaking It on Failure Paths | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97555 | Linux Kernel CIFS DACL Rewrite Allocates Buffer From On-Disk Length Then Writes Beyond It, Enabling Cross-Scope Heap Overflow | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-97548 | Linux Kernel XFS Realtime Block Map and Refcount Cursor Size Miscalculation Enables Local Memory Corruption | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97536 | Linux Kernel Qla2xxx FC Adapter Schedules Work Against Queue Pair Freed During Teardown, Enabling Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97531 | Linux Kernel Qla2xxx FC Driver Takes Reference on Vport Under Active Deletion, Enabling Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97528 | Linux Kernel Qla2xxx NVMe Unsolicited Context Freed While Still Linked in fcport List, Enabling Cross-Scope Use-After-Free | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-97527 | Linux Kernel Qla2xxx NVMe Unsolicited Context List Modified From Multiple Contexts Without Locking, Enabling Cross-Scope Use-After-Free | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-97525 | Linux Kernel x86 PAT Large-Page Split Allocates Page Tables Outside Standard Path, Enabling Cross-Scope Memory Corruption | 8.2 High | Updated |
| 2026-09-25 | CVE-2026-97524 | Linux Kernel MPTCP Subflow Reset Triggers Recursive Data-Ready Call, Causing Double Lock and Denial of Service | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97523 | Linux Kernel MPTCP Scheduler Uses Zero MSS When Subflow State Changes Race Data Transmission | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97445 | Linux Kernel ACPICA AML Resource Walker Insufficient Buffer Validation Allows Cross-Scope Overflow | 7.7 High | Updated |
| 2026-09-25 | CVE-2026-97444 | Linux Kernel ACPICA Parser Missing Boundary Checks in Two Namestring and Opcode Functions Allow Out-of-Scope Memory Access | 7.7 High | Updated |
| 2026-09-25 | CVE-2026-97442 | Linux Kernel ath11k Wi-Fi Driver Out-of-Bounds Write on Oversized Native Wi-Fi Headers Enables Cross-Scope Memory Corruption | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-97438 | Linux Kernel NTFS3 Directory Index Entry Accepts Advertised key_size Exceeding Actual Payload, Enabling Out-of-Bounds Read | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-97437 | Linux Kernel NTFS3 Directory Entry Bounds Check Confuses Character Count with Byte Count, Enabling Out-of-Bounds Read | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-97433 | Linux Kernel NVMe FDP Configuration Log Parser Accepts Zero Descriptor Size, Enabling Unbounded Iteration and Cross-Scope Memory Access | 8.2 High | Updated |
| 2026-09-25 | CVE-2026-97429 | Linux Kernel AMD KFD Queue Destruction Drops Locks While Waiting for Resume, Enabling Concurrent Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97428 | Linux Kernel AMD GPU FRU PIA TLV Parser Reads EEPROM Data Without Bounds, Allowing Cross-Scope Out-of-Bounds Access | 7.7 High | Updated |
| 2026-09-25 | CVE-2026-97421 | Linux Kernel RDMA umem iova Truncated to 32-Bit on Page-Size Selection, Enabling Local Memory Corruption | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-97417 | Linux Kernel Netfilter Connection Tracker TCP SACK Parser Dereferences Unaligned Pointer, Enabling Remote Memory Corruption | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-97413 | Linux Kernel RDMA/RTRS Server Integer Underflow in Network-Supplied Length Field Enables Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-25 | CVE-2026-97409 | Linux Kernel NVMe-FC Aborts Inflight Admin Requests Before Controller Initialization Completes, Enabling Out-of-Scope Memory Corruption | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-96889 | CVE-2026-96889 | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-96275 | CVE-2026-96275 | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-95519 | CVE-2026-95519 | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93830 | Linux Kernel stmmac XGMAC2 Default Interrupt Mask Triggers a MAC Interrupt Storm Reaching 695 Times the Actual RX Completion Rate | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-93827 | Linux Kernel virtio-fs Double-Free on Failed Queue Setup Leads to Cross-Component Memory Corruption | 8.4 High | Updated |
| 2026-09-25 | CVE-2026-93826 | Linux Kernel HID++ Driver Keeps Stale Input Device Pointer After Failed Registration, Enabling Use-After-Free | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-93817 | Linux Kernel perf Subsystem addr_filter_ranges RCU Use-After-Free Exposes Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93816 | Linux Kernel F2FS Inline Dentry Conversion Copies Names Before Validating Length Against Available Slots, Enabling Out-of-Bounds Write | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-93813 | Linux Kernel btrfs Tree Checker Accepts Malformed INODE_REF namelen, Enabling Local Privilege Escalation via Crafted Image | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93810 | Linux Kernel cachefiles Double File Reference Release in tmpfile Error Path Allows Local Privilege Escalation | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-93806 | Linux Kernel cfg80211 Wi-Fi Association Response Parser Accesses Status Fields Before Length Validation, Enabling Cross-Scope Memory Corruption | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93801 | Linux Kernel CIFS Client Stack-Allocated cifs_open_info_data May Expose Uninitialized Kernel Memory | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-93799 | Linux Kernel iwlwifi BA Window Status Handler Indexes Station Data Using Unvalidated Firmware-Supplied ID, Enabling Out-of-Scope Write | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93798 | Linux Kernel btrfs Relocation Root Reset Without Memory Barrier Exposes Race Condition Leading to Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93796 | Linux Kernel iwlwifi PCIe Transport Keeps Non-Null RX Pointers After Free, Enabling Use-After-Free on Reinitialize | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-93793 | Linux Kernel iwlwifi TX_CMD Response Parser Uses Firmware-Supplied frame_count Without Validation, Allowing Out-of-Scope Memory Access | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93790 | Linux Kernel iwlwifi BA Handler Indexes tid_data by Loop Counter Instead of Actual TID, Enabling Cross-Scope Out-of-Bounds Write | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93787 | Linux Kernel CIFS filldir Copies Directory Entry Name Using Server-Supplied Length Without Bounding to Response, Enabling Heap Overflow | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93786 | Linux Kernel ksmbd SMB Server Mutates Parent POSIX ACL Instead of Inheriting It, Corrupting Child Access Permissions | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93782 | Linux Kernel vhost-scsi Races VHOST_SET_MEM_TABLE Against Async Command Completion, Enabling Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93345 | MikroTik RouterOS Labelled-VPN NLRI Iterator Accepts Below-Minimum Prefix Length in BGP UPDATE, Enabling On-Path Service Crash | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-93288 | Linux Kernel Netfilter Logging Namespace Teardown Clears Logger Pointer Without RCU Grace Period, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93287 | Linux Kernel I2C SMBus Block Transfer Length Validated After Tracepoint Use, Enabling Local Memory Corruption | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93284 | Linux Kernel DRM Pagemap Migration Clears Page Array Before DMA Unmap Walk, Enabling Out-of-Scope Memory Corruption on Failure | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93282 | Linux ksmbd Accumulates ACEs from Every Principal Rather Than the Requesting User, Granting Authenticated Network Clients File Rights They Were Not Assigned | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93280 | Linux Kernel Greybus Audio Driver Walks Module-Supplied Topology Sections Without Bounding Sub-Section Sizes, Enabling Local Code Execution | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-93277 | Linux Kernel bnxt_re RDMA Destroy Callback Writes Output Before Validating Userspace Access, Enabling Double-Destroy Privilege Escalation | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93265 | Linux Kernel tc9563 PCI Power Controller Misparses Integrated Ethernet MAC Endpoint, Enabling Cross-Component Impact | 7.7 High | Updated |
| 2026-09-25 | CVE-2026-93262 | Linux Kernel RAID5 PPL Log Flush Iterator Continues After Entry Freed, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93260 | Linux Kernel PowerPC XIVE IPI Init Error Ignored in SMP Probe, Enabling Use-After-Free on Freed xive_ipis Array | 7.4 High | Updated |
| 2026-09-25 | CVE-2026-93250 | Linux Kernel VXLAN MDB Flush Continues Iterating Past Removed Entry, Enabling Use-After-Free | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93237 | Linux Kernel LoongArch's Compile-Time DIRECT_MAP_PHYSMEM_END Ignores cpu_pabits, Letting vmemmap_populate() Wrap Into Low Memory and Corrupt Page Tables on Loongson-2K CPUs | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-93229 | Linux Kernel NFS Server RPC Status Dump Missing Read Memory Barrier Before Seqcount Retry Enables Information Disclosure Race | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-93228 | Linux Kernel RDMA svcrdma Accepts Zero-Segment Write/Reply Chunks From Unauthenticated Peers, Enabling Remote Memory Corruption | 9.1 Critical | Updated |
| 2026-09-25 | CVE-2026-93225 | Linux Kernel fsl-imx8mq USB PHY Driver Leaks typec Switch Reference on Probe Failure | 7.4 High | Updated |
| 2026-09-25 | CVE-2026-93224 | Linux Kernel svcrdma Accept Error Path Calls Unregister Notification Before Register Succeeds, Enabling Double-Unregister Corruption | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93221 | Linux Kernel NFS Server Boolean Flags Accessed Without Serialization Enable Data Race Leading to Memory Corruption | 8.1 High | Updated |
| 2026-09-25 | CVE-2026-93207 | Linux Kernel SUNRPC GSS Credential Decoder Uses Uninitialized Stack Memory, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-25 | CVE-2026-78002 | CVE-2026-78002 | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-72463 | Linux Kernel xfrm IPsec Async Resumption Modifies Device Pointer Without Reference, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-25 | CVE-2026-72315 | Linux Kernel CIFS Client Deferred Close Holds Dentry Reference, Causing Use-After-Free on Unmount After Direct I/O | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69458 | Windows BitLocker Out-of-Bounds Read Lets Authorized Attackers Escalate Privileges Over a Network Connection | 8.0 High | Updated |
| 2026-09-25 | CVE-2026-69456 | Windows Speech Heap Buffer Overflow Spans Windows Server 2012 Through Server 2025, Letting Authorized Local Attackers Elevate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69455 | Windows Remote Access Connection Manager Heap Buffer Overflow Lets Authorized Local Attackers Escalate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69451 | Windows Management Instrumentation Use-After-Free Lets Authorized Attackers Escalate Privileges Over a Network Connection | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-69448 | Windows Bluetooth Service Race Condition Lets a Local Low-Privilege User Gain Elevated Privileges on Windows 10, 11, and Server | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-69447 | Windows Audio Service Heap Buffer Overflow Lets Authorized Local Attackers Elevate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69445 | Windows Compressed Folder Path Traversal Lets Authorized Local Attackers Elevate Privileges Across All Supported Windows Versions | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69444 | Windows Speech Heap Buffer Overflow from Windows Server 2016 Upward Lets Authorized Local Attackers Elevate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69441 | Windows Installer Race Condition Lets Authorized Local Attackers Escalate Privileges Across All Supported Windows Versions | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-69440 | Windows MIDI Service TOCTOU Race Condition Enables Local Privilege Escalation on Windows 11 | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-69436 | Windows Error Reporting Heap Buffer Overflow from Windows 10 Version 1809 Upward Lets Authorized Local Attackers Escalate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69434 | Windows URL Moniker Heap Buffer Overflow Lets Unauthenticated Network Attackers Execute Code Across All Supported Windows Versions | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-69433 | Windows Error Reporting Heap Buffer Overflow, Including Windows Server 2012, Lets Authorized Local Attackers Escalate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69396 | Windows NDIS Use-After-Free Lets Authorized Attackers Escalate Privileges Over a Network Connection | 7.1 High | Updated |
| 2026-09-25 | CVE-2026-69394 | Windows Audio Service Heap Buffer Overflow Lets a Low-Privilege Local User Elevate Privileges Across Windows 10 Through Server 2025 | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-69392 | Windows Shell Use-After-Free Lets Authorized Local Attackers Escalate Privileges on Windows 11 and Server 2025 | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69391 | Windows Broker Infrastructure Service Stack Buffer Overflow Lets Authorized Local Attackers Elevate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-69389 | Windows Storage Management Provider Heap Buffer Overflow Lets Authorized Local Attackers Escalate Privileges | 7.8 High | Updated |
| 2026-09-25 | CVE-2026-67281 | MikroTik RouterOS WebFig Stale Session Pointer Lets Unauthenticated Attackers Read Arbitrary Files | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-67278 | MikroTik RouterOS Accepts Malformed RSA/PKCS#1 v1.5 Signatures Across TLS and SSH, and Its Trust Store Includes an e=3 Root CA, Letting a Network Attacker Forge Valid Signatures Without the Private Key | 9.1 Critical | Updated |
| 2026-09-25 | CVE-2026-33824 | Microsoft Windows IKE Service Extensions' Double Free Enables Unauthenticated Remote Attackers to Execute Arbitrary Code; CISA's August 21st KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-25 | CVE-2026-32157 | Windows Remote Desktop Client Use-After-Free Lets Unauthenticated Network Attackers Execute Code | 8.8 High | Updated |
| 2026-09-25 | CVE-2026-26174 | Windows Server Update Service Race Condition Lets Authorized Local Attackers Escalate Privileges Across All Supported Windows Versions | 7.0 High | Updated |
| 2026-09-25 | CVE-2026-20190 | Cisco Identity Services Engine Improper Authorization Exposes Sensitive Information to Unauthenticated Remote Attackers | 7.5 High | Updated |
| 2026-09-25 | CVE-2026-20147 | Critical Cisco ISE and ISE-PIC Command Injection Scores 9.9 | 9.9 Critical | EPSS-Imminent |
| 2026-09-24 | CVE-2026-22619 | Eaton Intelligent Power Protector Uncontrolled Search Path Scores 7.8 | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-21662 | Critical Johnson Controls FMS Employee Unrestricted File Upload Scores 9.8 | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-89028 | MikroTik RouterOS SMB1 Session Setup Handler Accepts Crafted uniPwdLen That Corrupts Adjacent Heap Memory | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-89025 | Belden Hirschmann HiOS Switch Platform Missing HTTP Content Validation Allows Unauthenticated Attacker to Cause Web Server Denial of Service | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-85880 | Microsoft Windows' Heap-Based Buffer Overflow Allows Local Attackers to Escalate Privileges by Corrupting Heap Memory; CISA's September 22nd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-24 | CVE-2026-80156 | Lantronix SLC8000/SLC9000/EMG Series Web Upload Path Traversal Lets Authenticated Attackers Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-80155 | Lantronix SLC8000/SLC9000/EMG Series Web Upload Authentication Bypass Lets Unauthenticated Attackers Write Arbitrary Files | 10.0 Critical | Updated |
| 2026-09-24 | CVE-2026-80154 | All Lantronix SLC/EMG/SLB Firmware Versions Use Predictable Session Tokens, Letting Unauthenticated Attackers Hijack Active Sessions | 9.6 Critical | Updated |
| 2026-09-24 | CVE-2026-80147 | Lantronix SLC8000/SLC9000/EMG/SLB Stack Buffer Overflow via Undocumented Interface Allows Authenticated Attackers to Execute Arbitrary Code | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-80145 | Lantronix SLC8000/SLC9000/EMG Series Services Permission Allows Authenticated Command Injection as Root via a Distinct Injection Path | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-80144 | Lantronix SLC/EMG/SLB Undocumented Management Feature Lets Authenticated Attackers Execute Arbitrary Root Shell Commands | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-80143 | A Second Undocumented Lantronix SLC/EMG/SLB Command Path Lets Authenticated Attackers Execute Arbitrary Root Shell Commands | 9.9 Critical | Updated |
| 2026-09-24 | CVE-2026-78312 | Delta DIAEnergie Path Traversal Allows Unauthenticated Attackers to Write or Overwrite Arbitrary Files | 9.1 Critical | Updated |
| 2026-09-24 | CVE-2026-78311 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-78309 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-78308 | Delta DIAEnergie Authentication Bypass Vulnerability Allows Unauthenticated Access to Protected Functions | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69571 | Windows USB Audio Class driver (usbaudio.sys) Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69567 | Windows NTFS Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69564 | Windows Online Certificate Status Protocol (OCSP) Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69563 | Windows Program Compatibility Assistant Service Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69561 | Windows CD-ROM Driver Out-of-bounds read Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69560 | Windows Work Folder Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69553 | Windows Hyper-V Missing authorization Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69551 | Windows DNS Use after free Lets Authorized Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69547 | Windows DHCP Server Heap-based buffer overflow Lets Authorized Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69544 | Windows SMB Client Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69542 | Windows Camera Frame Server Monitor Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69540 | Windows Audio Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69539 | Windows Remote Desktop Services Use after free Lets Authorized Attackers Execute Code over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69538 | Windows Spaceport.sys Out-of-bounds read Lets Authorized Attackers Execute Code Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69535 | Windows Spaceport.sys Numeric Truncation Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69534 | Windows Program Compatibility Assistant Service Command Injection Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69532 | Windows NTFS Out-of-bounds read Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69525 | Windows Remote Desktop Services Use after free Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69518 | Windows Remote Desktop Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69514 | Windows Remote Desktop Services Heap-based buffer overflow Lets Authorized Attackers Execute Code over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69511 | Microsoft Windows Media Foundation Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69510 | Windows DHCP Server Stack-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.1) | 8.1 High | Updated |
| 2026-09-24 | CVE-2026-69509 | Windows Fax Service Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69505 | Windows NTFS Out-of-Bounds Read Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69500 | Windows Image Acquisition Use after free Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69500) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69496 | Windows Compressed Folder Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69491 | Windows Microsoft DirectMusic Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69479 | Windows NTFS Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code Locally (CVSS 8.4) | 8.4 High | Updated |
| 2026-09-24 | CVE-2026-69475 | Windows Remote Desktop Services Untrusted Pointer Dereference Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69473 | Windows Kernel Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69466 | Windows Kernel TOCTOU Race Condition Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69463 | Windows NTFS Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69461 | Windows NTFS Stack-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69450 | Windows Error Reporting Out-of-bounds read Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69430 | Windows Embedded Mode Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69429 | Windows IKE Extension Heap-based buffer overflow Lets Authorized Attackers Execute Code over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69428 | Windows LDAP - Lightweight Directory Access Protocol Out-of-bounds read Lets Unauthenticated Attackers Disclose Sensitive Information over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69427 | Windows VOLSNAP.SYS Out-of-bounds read Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69426 | Windows VOLSNAP.SYS Heap-based buffer overflow Lets Authorized Attackers Execute Code Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69424 | Windows Distributed File System (DFS) Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69423 | Windows USB Video Driver Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69421 | Windows Kernel Mode Driver Integer Underflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69420 | Windows VOLSNAP.SYS Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69413 | Windows USB Audio Class driver (usbaudio.sys) Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69412 | Windows DHCP Server Stack-based buffer overflow Lets Authorized Attackers Execute Code (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69410 | Windows Win32K Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69408 | Microsoft Windows Media Foundation Integer overflow or wraparound Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-69404 | Windows TCP/IP Race Condition Lets Authorized Attackers Execute Code over the Network (CVSS 8.1) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69398 | Windows Bluetooth Service Race Condition Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69397 | OpenSSH for Windows Use after free Lets Unauthenticated Attackers Execute Code over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69388 | Windows Bluetooth Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69386 | Microsoft Windows Media Foundation Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69385 | Windows TCP/IP Race Condition Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69383 | Windows Shell Arbitrary File Path Control Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69377 | Windows Modern Device Management (MDM) Missing authorization Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69371 | Windows Overlay Filter Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69368 | Windows Overlay Filter Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69366 | Windows Kernel Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69364 | Windows Print Spooler Components Race Condition Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69362 | Windows Error Reporting Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69357 | Windows NDIS Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69347 | Windows Fast FAT Driver Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code Locally (CVSS 7.4) | 7.4 High | Updated |
| 2026-09-24 | CVE-2026-69346 | Windows Print Spooler Components Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69342 | Windows DHCP Server Out-of-bounds read Lets Unauthenticated Attackers Disclose Sensitive Information over the Network (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-69341 | Windows Image Acquisition Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69340 | Windows NTFS Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69337 | Windows Registry Double free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69335 | Windows Win32K Use after free Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69335) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69334 | Windows Volume Manager Extension Driver Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69332 | Windows NTFS Out-of-bounds read Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69331 | Windows Remote Access Connection Manager Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69328 | Windows Storage Untrusted search path Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69324 | Windows Performance Monitor Type Confusion Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69322 | Microsoft Windows Search Component Double free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69319 | Windows USB Video Driver Race Condition Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69312 | Windows NTFS Out-of-Bounds Read Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69312) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69311 | Windows Audio Service Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69310 | Windows DNS Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69309 | Windows Print Spooler Components Double free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69307 | Windows USB Audio Class driver (usbaudio.sys) Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69305 | Microsoft Windows Search Component Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69301 | Windows Win32K Stack-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-69300 | Windows Push Notifications Use after free Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69300) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69299 | Microsoft COM for Windows Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69296 | Windows Device Association Service Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69295 | Windows USB Driver Out-of-bounds read Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69291 | Windows Volume Manager Extension Driver Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69290 | Windows Storage Spaces Controller Stack-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69289 | Windows Setup Files Cleanup Symbolic Link Following Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69287 | Windows Remote Desktop Services Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69284 | Windows DCOM Server Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69283 | Windows CD-ROM Driver Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69281 | Windows License Manager Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69280 | Windows Push Notifications Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69279 | Windows Cloud Files Mini Filter Driver Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-69274 | Windows Win32K Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-69270 | Windows USB Audio Class driver (usbaudio.sys) Heap-based buffer overflow Lets Authorized Attackers Execute Code Locally (CVSS 7.8) (CVE-2026-69270) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-69266 | Windows DHCP Server Integer Overflow or Wraparound Lets Unauthenticated Attackers Execute Code over the Network | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-69265 | Windows NTFS Out-of-Bounds Read Lets Authorized Attackers Escalate Privileges Locally (CVE-2026-69265) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68896 | Microsoft Windows Search Component Absolute path traversal Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68894 | Windows Error Reporting Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68893 | Windows Remote Desktop Licensing Service Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-68887 | Windows Message Queuing Queue Manager Out-of-Bounds Read Lets Unauthenticated Attackers Access Sensitive Data over the Network | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-68880 | Windows Win32K Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68878 | Windows Fast FAT Driver Stack-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68877 | Windows Storage Spaces Controller Heap-Based Buffer Overflow Lets Authorized Attackers Execute Code Locally (CVE-2026-68877) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68876 | Windows Program Compatibility Assistant Service Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68875 | Windows NTFS Buffer Over-read Lets Authorized Attackers Execute Code Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68848 | Windows Print Spooler Components Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68846 | Windows Kernel Use after free Lets Authorized Attackers Escalate Privileges over the Network (CVSS 7.1) | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-68845 | Windows Program Compatibility Assistant Service Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68844 | Windows Storage Spaces Controller Heap-Based Buffer Overflow Lets Authorized Attackers Execute Code Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68841 | Windows NTFS Heap-based buffer overflow Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68840 | Windows USB Driver Concurrent execution using shared resource with improper synchronization ('race condition') Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-68839 | Windows USB Mass Storage Class Driver Heap-based buffer overflow Lets Unauthenticated Attackers Execute Code over the Network (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-68838 | Windows NTFS Stack-based buffer overflow Lets Authorized Attackers Escalate Privileges over the Network (CVSS 8.0) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68835 | Windows Print Spooler Components Use-After-Free Lets Authorized Attackers Escalate Privileges over the Network | 7.1 High | Updated |
| 2026-09-24 | CVE-2026-68834 | Windows NTFS Stack-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network (CVE-2026-68834) | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-68832 | Windows NTFS Integer Overflow Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-24 | CVE-2026-68827 | Windows GDI+ Integer Underflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-24 | CVE-2026-62759 | Windows Netlogon Authentication Bypass Lets Unauthenticated Attackers Compromise the System Locally | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-62706 | Microsoft Windows Media Foundation Out-of-Bounds Read Lets Unauthenticated Attackers Execute Code over the Network | 8.8 High | Updated |
| 2026-09-24 | CVE-2026-62694 | Windows Installer Use after free Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-5857 | Contiki-NG MQTT Client Over-Length Topic Sets Received Flag Before Rejection, Enabling Out-of-Bounds Write on Subsequent TCP Segment | 8.1 High | Updated |
| 2026-09-24 | CVE-2026-50349 | Windows Ancillary Function Driver for WinSock Race Condition Lets Authorized Attackers Escalate Privileges Locally | 7.0 High | Updated |
| 2026-09-24 | CVE-2026-19654 | Privilege Escalation in Enterprise Linux 9, Allowing Privilege Escalation | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-15711 | libsoup WebSocket Frame Parsing Denial of Service Affects Red Hat Enterprise Linux and SAP Solutions (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-15709 | libsoup WebSocket permessage-deflate Decompression Loop Denial of Service Affects Red Hat Enterprise Linux (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-24 | CVE-2026-13249 | Honeywell PD45 Industrial Printer Web Management Interface Accepts Unauthenticated File Uploads That Enable Remote Code Execution | 9.8 Critical | Updated |
| 2026-09-24 | CVE-2026-13248 | Honeywell PD45 Industrial Printer Intermec Fingerprint Interface Lets Authenticated Admin Accounts Write Arbitrary Files, Enabling Remote Code Execution | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-83998 | Remote Desktop Client Heap-Based Buffer Overflow Lets Unauthenticated Attackers Execute Code over the Network | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-82028 | absmach magistrala SQL Injection Reachable by Authenticated Remote Attackers with High Severity (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-73176 | Advantech EKI-1242IEIMS Firmware V1.06.01 Web Management Interface Command Injection Lets Authenticated Remote Attackers Execute OS Commands | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73175 | Advantech EKI-1242EIMS OPC UA Gateway Session Pool Exhaustion Lets Adjacent Unauthenticated Attackers Cause Complete Denial of Service | 7.1 High | Updated |
| 2026-09-23 | CVE-2026-73174 | Advantech EKI-1242EIMS edgserver Management Protocol Transmits Credentials in Cleartext, Exposing Them to Network-Adjacent Observers | 8.7 High | Updated |
| 2026-09-23 | CVE-2026-73173 | Advantech EKI-1242EIMS edgserver Management Protocol Exposes Critical Device Management Functions Without Authentication | 8.8 High | Updated |
| 2026-09-23 | CVE-2026-73172 | Advantech EKI-1242EIMS edgserver Management Service Unauthenticated OS Command Injection Allows Remote Root Execution | 9.3 Critical | Updated |
| 2026-09-23 | CVE-2026-73171 | Advantech EKI-1242EIMS Backup-Restore Upload Lets Authenticated Remote Attackers Overwrite Arbitrary Device Filesystem Files | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73170 | Advantech EKI-1242EIMS Modbus CSV Import Executes Attacker-Controlled Lua Code via Crafted Upload | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73167 | Advantech EKI-1242IEIMS Web Management Interface Contains a Second OS Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73166 | Advantech EKI-1242IEIMS Web Management Interface Code Injection Lets Authenticated Remote Attackers Execute Arbitrary OS Commands | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73165 | Advantech EKI-1242IEIMS Web Management Interface Has a Third Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73164 | Advantech EKI-1242IEIMS Web Management Interface Contains a Fourth OS Command Injection Path Exploitable by Authenticated Remote Attackers | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73163 | Advantech EKI-1242IEIMS Web Management Interface Authenticated Command Injection Allows Remote OS Command Execution via Web Interface | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-73014 | Data Sharing Service Client Missing authorization Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-23 | CVE-2026-70584 | Windows Core Messaging Type Confusion Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-23 | CVE-2026-69528 | Windows Shell Missing Authentication Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-23 | CVE-2026-69517 | Windows Wireless Networking Use-After-Free Lets Authorized Attackers Escalate Privileges Locally | 7.0 High | Updated |
| 2026-09-23 | CVE-2026-69512 | Windows Spaceport.sys Heap-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges over the Network | 8.0 High | Updated |
| 2026-09-23 | CVE-2026-69508 | Windows MIDI Service Module Stack-Based Buffer Overflow Lets Authorized Attackers Escalate Privileges Locally | 7.8 High | Updated |
| 2026-09-23 | CVE-2026-69443 | Microsoft Azure Attestation service and Device Health Attestation Service Out-of-Bounds Read Lets Unauthenticated Attackers Access Sensitive Data over the Network | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-53985 | Ground Station Prior to 0.6.0 Socket.IO service_control Handler Allows Unauthenticated Peer to Force Service Shutdown | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-53984 | Ground Station Prior to 0.6.0 Socket.IO database_backup Handler Allows Unauthenticated Peer to Destroy Database and Inject Arbitrary Data | 9.1 Critical | Updated |
| 2026-09-23 | CVE-2026-53983 | Ground Station Orbital-Source Configuration Path Accepts Unauthenticated Socket.IO SSRF Requests, Causing Outbound HTTP Requests to Attacker-Chosen Destinations | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-42784 | sequoia-openpgp Incorrect Key Flags Inference for Older Certificates Enables Unauthenticated Attackers to Forge Signatures (CVSS 7.4) | 7.4 High | Updated |
| 2026-09-23 | CVE-2026-19535 | Advantech EKI-1242IEIMS LuCI Administrative Interface CSRF Lets Unauthenticated Attackers Perform Unauthorized State Changes via Logged-In Users | 8.6 High | Updated |
| 2026-09-23 | CVE-2026-19438 | ABB Mint Workbench I Path Traversal Lets Unauthenticated Remote Attackers Access Sensitive Files (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-18649 | Denial of Service in the GStreamer gst-plugins-good package Affects Enterprise Linux 8.8 Telecommunications Update Service, Leading to Service Disruption | 7.5 High | Updated |
| 2026-09-23 | CVE-2026-12974 | Forcepoint NGFW Security Policy Bypass via Overly Permissive Input Validation Affects Versions 7.1 Through 7.5 | 7.9 High | Updated |
| 2026-09-22 | CVE-2026-83549 | SonicWall SMA1000 Appliances' OS Command Injection Allows Authenticated Local Attackers to Execute Arbitrary Commands with Root Privileges; CISA's September 5th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-83548 | SonicWall SMA1000 Appliances' Server-Side Request Forgery Allows Unauthenticated Remote Attackers to Reach Internal Services and Compromise the Secure Mobile Access Gateway; CISA's September 5th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock's Use-After-Free Allows a Local Attacker to Gain Elevated Privileges via a Freed Memory Reference; CISA's August 25th KEV Deadline Has Passed | 7.0 High | KEV |
| 2026-09-22 | CVE-2026-64849 | MLflow's Server-Side Request Forgery Flaw Allows Remote Attackers to Use the ML Platform Server as a Proxy to Access Internal Services and Steal Credentials; CISA's September 2nd KEV Deadline Has Passed | 9.3 Critical | KEV |
| 2026-09-22 | CVE-2026-48558 | SimpleHelp Accepts Unverified Cryptographic Signatures, Letting Remote Attackers Bypass Authentication; CISA's July 2nd KEV Deadline for Covered Entities Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-45498 | Microsoft Defender's Unspecified Vulnerability Allows for Denial of Service; CISA's June 3rd KEV Deadline Has Passed | 4.0 Medium | KEV |
| 2026-09-22 | CVE-2026-41091 | Microsoft Defender's Link Following Flaw Enables an Authorized Attacker to Elevate Privileges Locally; CISA's June 3rd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-34486 | Apache Tomcat's Missing Encryption of Sensitive Session Data Exposes Credentials and Tokens to Network Interception; CISA's August 7th KEV Deadline Has Passed | 7.5 High | KEV |
| 2026-09-22 | CVE-2026-34197 | Apache ActiveMQ's Improper Input Validation Enables Code Injection Affecting Both ActiveMQ and Broker Deployments; CISA's April 30th KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-22 | CVE-2026-33825 | Microsoft Defender's Insufficient Access Control Allows an Authorized Attacker to Escalate Privileges Locally; CISA's May 6th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-32202 | Microsoft Windows Shell's Protection Mechanism Failure Allows an Unauthorized Attacker to Perform Spoofing Over the Network; CISA's May 12th KEV Deadline Has Passed | 4.3 Medium | KEV |
| 2026-09-22 | CVE-2026-31431 | Linux Kernel Resource Mishandling That Allows Privilege Escalation Carries a Lapsed May 15th CISA KEV Mandate; Covered Entities on Unpatched Kernels Remain Out of Compliance | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-20316 | Cisco Secure Firewall Management Center Hard-Coded Password Lets Attackers Bypass Authentication; CISA's August 1st KEV Deadline for Covered Entities Has Passed | 5.3 Medium | KEV |
| 2026-09-22 | CVE-2026-20262 | Authenticated Path Traversal in Cisco Catalyst SD-WAN Manager Lets Remote Attackers Write Files Outside Allowed Directories; CISA's June 29th KEV Deadline Has Passed | 6.5 Medium | KEV |
| 2026-09-22 | CVE-2026-20245 | Cisco Catalyst SD-WAN Manager's Improper Encoding Allows an Authenticated Local Attacker to Execute Arbitrary Commands as Root via a Crafted File; CISA's June 23rd KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-22 | CVE-2026-20230 | Cisco Unified Communications Manager SSRF Flaw Routes Attacker Requests to Internal Resources; CISA's June 28th KEV Deadline for Covered Entities Has Lapsed | 8.6 High | KEV |
| 2026-09-22 | CVE-2026-20200 | Cisco IMC web management command injection allows authenticated low-privilege attacker to execute commands as root | 8.8 High | Exploited |
| 2026-09-22 | CVE-2026-20182 | Cisco Catalyst SD-WAN Controller and Manager's Authentication Bypass Gives Unauthenticated Remote Attackers Administrative Privileges; CISA's May 17th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-20180 | Critical Cisco ISE Path Traversal Enables Remote Code Execution, Scores 9.9 | 9.9 Critical | EPSS-Imminent |
| 2026-09-22 | CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Leaks Sensitive Configuration Data to Unauthorized Users; CISA's April 23rd KEV Remediation Requirement Has Expired for Covered Entities | 6.5 Medium | KEV |
| 2026-09-22 | CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Stores Credentials in a Recoverable Format, Enabling Credential Theft; CISA's April 23rd KEV Mandate for Covered Entities Has Lapsed | 7.5 High | KEV |
| 2026-09-22 | CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Exposes Privileged API Functions to Unauthorized Callers; CISA's April 23rd KEV Remediation Deadline for Covered Entities Has Long Passed | 5.4 Medium | KEV |
| 2026-09-22 | CVE-2026-20079 | Cisco Firewall Management Center's Authentication Bypass via an Alternate Path Grants Unauthenticated Remote Attackers Full Administrative Control; CISA's September 12th KEV Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-15410 | SonicWall SMA1000's Code Injection Allows a Remote Authenticated Administrator to Execute Arbitrary OS Commands Under Specific Conditions; CISA's July 17th KEV Deadline Has Passed | 7.2 High | KEV |
| 2026-09-22 | CVE-2026-15409 | SonicWall SMA1000 Secure Access Appliances Accept Forged Server-Side Requests, Enabling Internal Network Pivoting; CISA's July 17th KEV Remediation Deadline Has Passed | 10.0 Critical | KEV |
| 2026-09-22 | CVE-2026-12569 | PTC Windchill and FlexPLM's Improper Input Validation Allows Unauthenticated Remote Attackers to Execute Arbitrary Code via Malicious Network Requests; CISA's June 28th KEV Deadline Has Passed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-0300 | PAN-OS Out-of-Bounds Write Enabling Code Execution Affects Both Palo Alto Networks Firewalls and Siemens RUGGEDCOM APE1808 Industrial Appliances; CISA's May 9th KEV Window Has Closed | 9.8 Critical | KEV |
| 2026-09-22 | CVE-2026-0257 | PAN-OS Authentication Bypass Enabling Unauthorized VPN Tunnels Affects Palo Alto Networks Prisma Access and Siemens RUGGEDCOM APE1808; Now Listed in CISA's Known Exploited Vulnerabilities Catalog | 9.1 Critical | KEV |
| 2026-09-22 | CVE-2026-95619 | Integer Overflow in libstdc++ Affects Enterprise Linux 9 | 7.7 High | Updated |
| 2026-09-22 | CVE-2026-95508 | Heap-Based Buffer Overflow in Enterprise Linux 8, Leading to Service Disruption | 7.4 High | Updated |
| 2026-09-22 | CVE-2026-93569 | Netty HTTP/1 to HTTP/2 Upgrade Process Flaw Lets Remote Unauthenticated Attackers Modify Data and Partially Access Sensitive Information (CVSS 8.2) | 8.2 High | Updated |
| 2026-09-22 | CVE-2026-93568 | Netty HTTP/2 Extended CONNECT Handling Flaw Lets Remote Unauthenticated Attackers Modify Data in Transit via Specially Crafted Requests (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-93567 | Security Flaw in Netty's HTTP/2 codec Affects Single Sign-On 7 | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-93565 | Security Flaw in Netty RtspDecoder Affects Single Sign-On 7 | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-93564 | Netty HAProxy PROXY-v2 Decoder Reference-Count Leak Lets Unauthenticated Remote Attackers Cause Denial of Service (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-93558 | Netty WebSocketServerExtensionHandler Flaw Lets Unauthenticated Remote Attackers Cause Denial of Service in Red Hat AMQ Broker (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-93491 | Denial of Service in Netty's HttpServerCodec Affects Single Sign-On 7, Leading to Service Disruption | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-93488 | Denial of Service in Netty Affects Single Sign-On 7, Leading to Service Disruption (CVE-2026-93488) | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-92925 | Out-of-Bounds Access in Redis community Affects Enterprise Linux 9, Leading to Service Disruption | 7.1 High | Updated |
| 2026-09-22 | CVE-2026-87766 | Red Hat Enterprise Linux 10 bubblewrap Arbitrary Filesystem Write Reachable by Low-Privilege Local Attackers (CVSS 8.8) | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-87742 | Quarkus WebSockets Next Streaming Message Handling Lets Remote Attackers Cause Denial of Service (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-72946 | Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-72940 | Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-72936 | Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network | 8.1 High | Updated |
| 2026-09-22 | CVE-2026-72929 | Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-72926 | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-7273 | Zyxel GS1900 Series Switches' CGI Program Stack-Based Buffer Overflow Allows a LAN-Side Unauthenticated Attacker to Execute OS Commands via Crafted HTTP Requests; CISA's September 24th KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-22 | CVE-2026-71221 | Enterprise Linux gfs2-utils Code Execution Reachable by Unauthenticated Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-71220 | Enterprise Linux gfs2-utils Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69791 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69790 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-69784 | Windows Hello Use-After-Free Lets Authorized Attackers Escalate Privileges Locally | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-69775 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network | 7.1 High | Updated |
| 2026-09-22 | CVE-2026-69762 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network | 8.0 High | Updated |
| 2026-09-22 | CVE-2026-69760 | Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-69757 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network | 7.1 High | Updated |
| 2026-09-22 | CVE-2026-69744 | Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-69740 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-69735 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69729 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network | 8.8 High | Updated |
| 2026-09-22 | CVE-2026-69725 | Double free in Windows Hello allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-69720 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-69711 | Windows Device Association Service Use-After-Free Lets Authorized Attackers Escalate Privileges Locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69710 | Windows Hello Race Condition Lets Authorized Attackers Escalate Privileges Locally | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-69708 | Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69694 | Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69693 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69689 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network | 8.0 High | Updated |
| 2026-09-22 | CVE-2026-69682 | Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69654 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-69652 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-22 | CVE-2026-5680 | Red Hat Enterprise Linux 9 Undertow Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-22 | CVE-2026-43961 | Red Hat Enterprise Linux 10 Vim's Security Flaw Reachable by Unauthenticated Local Attackers (CVSS 7.8) | 7.8 High | Updated |
| 2026-09-22 | CVE-2026-31278 | Suprema BioStar 2 Active Directory Settings Endpoint Exposes Service Account Credentials in Cleartext to Crafted GET Requests | 7.7 High | Updated |
| 2026-09-21 | CVE-2026-90042 | Linux Kernel ceph properly decrypt filenames in vmalloc() buffers, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-90041 | Linux Kernel HID: sony: clean up device list on probe failure | 8.8 High | Updated |
| 2026-09-21 | CVE-2026-90037 | Linux Kernel NFSD: Failure to Prevent client use-after-free during close_lru reaping, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-90036 | Linux Kernel NFSD Prevent client use-after-free during blocked-lock reaping, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89815 | Linux Kernel drm/ttm: Memory Safety Issue Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89799 | Linux Kernel bpf: Disable preemption in bpf_get_stackid | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89763 | Linux Kernel KEYS trusted: Fix TPM teardown ordering | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89755 | Linux Kernel mm/migrate_device: Failure to Clear stale mapping after freeing swapcache | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89731 | Linux Kernel cxl/ras: Out-of-Bounds Read Allows Local Privilege Escalation | 7.1 High | Updated |
| 2026-09-21 | CVE-2026-89708 | Linux Kernel nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89685 | Linux Kernel nfsd fix clock domain mismatch in clients_still_reclaiming(), Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-89676 | Linux Kernel nfsd: Reference Count Error Enables Remote Code Execution (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89667 | Linux Kernel nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache, Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-09-21 | CVE-2026-89660 | Linux Kernel NFSD Prevent client use-after-free during admin state revocation, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89659 | Linux Kernel NFSD Prevent client use-after-free during delegation revoke, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-89624 | Linux Kernel HID: universal-pidff: stop the device when force-feedback init fails | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89622 | Linux Kernel HID mcp2221: clear rxbuf after I2C/SMBus transfer completes | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89602 | Linux Kernel erofs: skip sufficiently large global buffers when resizing | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89564 | Linux Kernel ip orphan prefetched skbs before multicast forwarding | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89561 | Linux Kernel ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv(), Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-89545 | Linux Kernel sunrpc: defer rq_argp and rq_resp free until after RCU grace period | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-89544 | Linux Kernel SUNRPC: Failure to Fix gssx_dec_option_array error path bugs, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-89535 | Linux Kernel svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id, Reachable from the Network Without Credentials (CVSS 8.1) | 8.1 High | Updated |
| 2026-09-21 | CVE-2026-89492 | Linux Kernel ocfs2: Failure to Validate directory-index entry counts when reading metadata, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-85150 | Red Hat Enterprise Linux 10 GStreamer's Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-85013 | Red Hat Enterprise Linux 10 environment-modules Security Flaw Reachable by Low-Privilege Local Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-09-21 | CVE-2026-81627 | Security Flaw in QEMU Affects Enterprise Linux 9 | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-80945 | Linux Kernel crypto: iaa - unmap dst before software fallback on decompress, Reachable Without Authentication (CVSS 9.1) | 9.1 Critical | Updated |
| 2026-09-21 | CVE-2026-80734 | Linux Kernel btrfs: Failure to Initialize inode mapping flags for cached inodes | 8.8 High | Updated |
| 2026-09-21 | CVE-2026-80685 | Linux Kernel mm/util: Missing Guard: don't read __page_2 for order-1 folios in snapshot_page() | 7.1 High | Updated |
| 2026-09-21 | CVE-2026-74407 | Linux Kernel wifi ath11k: cancel SSR work items during PCI shutdown | 8.8 High | Updated |
| 2026-09-21 | CVE-2026-74269 | Linux Kernel bnxt: Failure to Fix head underflow on XDP head-grow, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-72989 | Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-72962 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-72961 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-72960 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network | 8.8 High | Updated |
| 2026-09-21 | CVE-2026-72958 | Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally | 8.2 High | Updated |
| 2026-09-21 | CVE-2026-72953 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally | 7.8 High | Updated |
| 2026-09-21 | CVE-2026-72952 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-72949 | Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-72494 | Linux Kernel RDMA/irdma Replace waitqueue and flag with completion, Reachable Without Authentication at CVSS 9.8 | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-72438 | Linux Kernel md/raid10: Failure to Fix writes_pending and barrier reference leaks on discard failures, Reachable from the Network Without Credentials (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-21 | CVE-2026-72355 | Linux Kernel netfs: Failure to Fix barriering when walking subrequest list, Reachable Without Authentication (CVSS 9.8) | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-71226 | Enterprise Linux Memory Corruption Reachable by Unauthenticated Local Attackers (CVSS 7.3) | 7.3 High | Updated |
| 2026-09-21 | CVE-2026-69648 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-69625 | Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network | 8.0 High | Updated |
| 2026-09-21 | CVE-2026-69617 | Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-69606 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-69602 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network | 7.1 High | Updated |
| 2026-09-21 | CVE-2026-69597 | Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network | 7.1 High | Updated |
| 2026-09-21 | CVE-2026-69586 | Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network | 9.8 Critical | Updated |
| 2026-09-21 | CVE-2026-69575 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-54230 | Enterprise Linux Arbitrary Filesystem Write Reachable by Low-Privilege Local Attackers (CVSS 7.0) | 7.0 High | Updated |
| 2026-09-21 | CVE-2026-19611 | Red Hat JBoss Enterprise Application Platform 7 WildFly Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 7.4) | 7.4 High | Updated |
| 2026-09-21 | CVE-2026-16445 | Red Hat Enterprise Linux 8 dracut Remote Code Execution Reachable by Unauthenticated Adjacent-Network Attackers (CVSS 7.5) | 7.5 High | Updated |
| 2026-09-20 | CVE-2026-87886 | Acronis Backup's Incorrect Default Permissions Allow a Local Attacker to Access Backup Files and Configurations Not Intended for Their Account; CISA's September 19th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-20 | CVE-2026-84869 | ConnectWise ScreenConnect's Improper Privilege Management and Missing Authorization Allow Unauthenticated Attackers to Gain Administrative Control of the Remote Support Platform; CISA's September 14th KEV Deadline Has Passed | 9.9 Critical | KEV |
| 2026-09-20 | CVE-2026-81963 | Windows Update Stack Symbolic Link Following Lets Authorized Attackers Escalate Privileges Locally (CVSS 7.8) | 7.8 High | KEV |
| 2026-09-20 | CVE-2026-67277 | MikroTik RouterOS's Missing Authentication for a Critical Function Allows Unauthenticated Attackers to Access and Modify Router Configuration; CISA's September 13th KEV Deadline Has Passed | 8.2 High | KEV |
| 2026-09-20 | CVE-2026-53362 | Linux Kernel's Unspecified Flaw Allows Local Attackers to Gain Elevated Privileges on Affected Systems; CISA's August 30th KEV Deadline Has Passed | 7.8 High | KEV |
| 2026-09-20 | CVE-2026-53266 | Linux Kernel's Out-of-Bounds Write Vulnerability Allows Local Attackers to Escalate Privileges or Cause a Kernel Crash; CISA's September 21st KEV Deadline Has Passed | 8.8 High | KEV |
| 2026-09-20 | CVE-2026-50516 | Microsoft Azure Kubernetes Service's Missing Authentication on a Critical Function Allows Unauthenticated Attackers to Interact with Privileged Cluster Management Endpoints | 9.4 Critical | Updated |
| 2026-09-20 | CVE-2026-20349 | Cisco Secure Firewall ASA and FTD's Heap Inspection Vulnerability Allows Remote Attackers to Extract Sensitive Memory Contents from the Firewall Device; CISA's August 14th KEV Deadline Has Passed | 8.6 High | KEV |
| 2026-09-20 | CVE-2026-20301 | Cisco IOS and IOS XE malformed XMCP packet causes denial of service via unauthenticated remote attacker | 8.6 High | Exploited |
| 2026-09-20 | CVE-2026-20124 | Cisco IOS XE malformed SNMP request causes device reload affecting SNMP versions 1, 2c, and 3 | 7.7 High | Exploited |
| 2026-09-18 | CVE-2026-80469 | Sick AG Sentio Creator Device Manager Extension Bypasses Driver Signature Verification, Allowing Malicious Package to Execute Arbitrary Code | 8.3 High | Updated |
| 2026-09-18 | CVE-2026-3869 | Schneider Electric Modicon M580 Incorrect Authentication Algorithm Implementation Risks Full PLC Compromise When a Lower Application Level Project Is Running | 9.2 Critical | Updated |
| 2026-09-18 | CVE-2026-27563 | Crafted GET Request to the Datastorage API Lets Admin Credentials Trigger Root Command Execution on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-18 | CVE-2026-27558 | Operator Access to the IODD File Removal Endpoint on Pepperl+Fuchs ICE-Series IO-Link Masters Allows Root Command Injection | 8.8 High | Updated |
| 2026-09-18 | CVE-2026-27548 | Command Injection in the IODD Port Info Endpoint Grants Root Access on Pepperl+Fuchs ICE-Series IO-Link Masters to Any User or Operator Account | 8.8 High | Updated |
| 2026-09-18 | CVE-2026-15579 | Moxa TN-4500B Series Ethernet Switch Out-of-Bounds Write in Web Login Username Field Allows Remote Unauthenticated Attacker to Execute Code | 8.8 High | Updated |
| 2026-09-18 | CVE-2023-5778 | ABB Freelance Controller DCP, AC700, AC800, and AC900 Improper Length Parameter Handling Allows Remote Denial of Service | 7.5 High | Updated |
| 2026-09-16 | CVE-2026-53006 | Linux Kernel ICMPv6 Use-After-Free via Pointer Cached Before pskb_pull on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-09-16 | CVE-2026-27565 | Unauthenticated IODD File Upload on Pepperl+Fuchs ICE-Series IO-Link Masters Executes a Root Shell Script That Persists Across Reboots | 9.8 Critical | Updated |
| 2026-09-16 | CVE-2026-27564 | Pepperl+Fuchs ICE-Series IO-Link Masters Run Injected Root Commands When Admin Credentials Submit a Crafted PUT Request to the Datastorage API | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27562 | Admin-Level PUT Requests to the IODD Configuration API Execute Injected Commands as Root on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27561 | Admin Credentials Enable Root Command Injection via the IODD Config GET API on Pepperl+Fuchs ICE-Series IO-Link Masters | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27560 | Admin-Credentialed DELETE Requests to Pepperl+Fuchs ICE-Series IO-Link Masters' Status API Carry Injected Commands Executed at Root | 7.2 High | Updated |
| 2026-09-16 | CVE-2026-27559 | User Credentials Are Enough to Inject Root-Level Commands via the Status Data API on Pepperl+Fuchs ICE-Series IO-Link Masters | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27557 | Unauthenticated Path Traversal in Pepperl+Fuchs ICE-Series IO-Link Masters Exposes the Device's SSH Server Private Keys | 7.5 High | Updated |
| 2026-09-16 | CVE-2026-27556 | Operator Cookie Enables Arbitrary PHP Code Execution on Pepperl+Fuchs ICE-Series IO-Link Masters via Local File Inclusion in the IODD Parameter Save Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27555 | A Valid User Cookie Triggers Arbitrary PHP Code Execution on Pepperl+Fuchs ICE-Series IO-Link Masters via Local File Inclusion in the IODD Port Info Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27554 | IODD Parameter Save Endpoint on Pepperl+Fuchs ICE-Series IO-Link Masters Accepts Injected Commands from Operator-Level Accounts, Yielding Root Access | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27552 | Pepperl+Fuchs ICE-Series IO-Link Masters Allow Low-Privileged Users to Upload Arbitrary IODD Files via a Missing Authorization Check, Enabling Device Manipulation or Crashes | 8.1 High | Updated |
| 2026-09-16 | CVE-2026-27551 | User-Level Credentials Give Root Shell on Pepperl+Fuchs ICE-Series IO-Link Masters via the Parameter Management Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27550 | Operator Credentials Can Inject Root-Level OS Commands via the Field_Shadow_Password Handler on Pepperl+Fuchs ICE-Series IO-Link Masters | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27549 | Operator-Level Credentials Suffice to Run Root Commands on Pepperl+Fuchs ICE-Series IO-Link Masters via the IODD Upload Endpoint | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27547 | IODD Menu Info Request on Pepperl+Fuchs ICE-Series IO-Link Masters Passes Unvalidated Parameters to Root-Level Commands, Reachable with User-Level Credentials | 8.8 High | Updated |
| 2026-09-16 | CVE-2026-27546 | The _account_log Function in Pepperl+Fuchs ICE-Series IO-Link Masters Lets Unauthenticated Attackers Log In as Admin Regardless of Account Configuration | 9.8 Critical | Updated |
| 2026-09-15 | CVE-2026-46116 | Linux Kernel xfrm_state List Defensively Not Unhashed in __xfrm_state_delete on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-14 | CVE-2026-62647 | Siemens Reyrolle 7SR5 Weak Random Number Generator Produces Low-Entropy Session Identifiers | 7.4 High | Updated |
| 2026-09-14 | CVE-2026-34223 | Siemens Desigo CC ClickOnce Client Code Injection Vulnerability Across All Versions from V6 Through V9 | 8.2 High | Updated |
| 2026-09-11 | CVE-2026-81822 | AVEVA Pipeline Integrity Monitor Weak Password Hashing in PIMBoards Project Files Allows Credential Recovery via Brute Force | 8.4 High | Updated |
| 2026-09-11 | CVE-2026-81821 | AVEVA Pipeline Integrity Monitor Hard-Coded Encryption Key in PIMBoards Project Files Exposes Sensitive Information to File Read Access | 8.4 High | Updated |
| 2026-09-11 | CVE-2026-63298 | LXD NVIDIA Instance Configuration Handler Accepts Newline Characters in nvidia.driver.capabilities and nvidia.require.* Values, Letting Authenticated Attackers Inject Arbitrary Directives into the GPU Configuration | 9.9 Critical | Updated |
| 2026-09-10 | CVE-2026-62646 | Siemens Reyrolle 7SR5 Session Identifier Generated with Insufficient Randomness, Enabling Token Prediction Attacks | 7.4 High | Updated |
| 2026-09-10 | CVE-2026-53002 | Linux Kernel netfilter Conntrack sprintf Usage Risks Buffer Overrun on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-09-10 | CVE-2026-32589 | Red Hat Quay authenticated push access enables interference with other users' in-progress image uploads across repositories | 7.4 High | Updated |
| 2026-09-09 | CVE-2026-9854 | Hitachi Energy MicroSCADA X SYS600 Engineering Tool Access Can Escalate Privileges to Administrator on the Underlying Windows Host | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-9853 | Hitachi Energy MicroSCADA X SYS600 RBAC Flaw Lets Any OS-Authenticated User Access and Modify Application Objects Without Application Login | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-9852 | Hitachi Energy MicroSCADA X SYS600 CSV Injection Vulnerability Allows Authenticated Users to Inject Formulas into Exported Spreadsheets | 7.8 High | Updated |
| 2026-09-09 | CVE-2026-8044 | Schneider Electric EcoStruxure IT Data Center Expert Argument Injection in Privileged Account Context Enables Remote Code Execution | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-77120 | Schneider Electric PowerLogic T300 OS Command Injection via Admin-Privileged Context Allows Privilege Escalation to Root | 8.7 High | Updated |
| 2026-09-09 | CVE-2026-67367 | Siemens SIMOVE Fleetmanager Path Traversal Allows Unauthenticated Attacker to Read Sensitive Files via Relative Path Manipulation | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-62649 | Siemens Reyrolle 7SR5 Web Server Resource Exhaustion Under High Concurrent HTTP Request Volume Causes Denial of Service | 7.5 High | Updated |
| 2026-09-09 | CVE-2026-54100 | Red Hat's Windows Machine Config Operator skips SSH host-key checks, letting adjacent attackers capture node bootstrap credentials | 8.3 High | Updated |
| 2026-09-09 | CVE-2026-54099 | A compromised Windows node can forge a cluster-administrator certificate through WMCO's CSR auto-approver, CVSS 8.8 | 8.8 High | Updated |
| 2026-09-09 | CVE-2026-32590 | Unsafe Deserialization in Red Hat Quay Resumable Upload Handling | 7.1 High | Updated |
| 2026-09-09 | CVE-2026-19233 | Schneider Electric EcoStruxure IT Data Center Expert Server-Side Request Forgery in Privileged Account Context Risks Unauthorized Command Execution | 8.6 High | Updated |
| 2026-09-09 | CVE-2026-11841 | Sick AG InspectorP Sensor AppEngine HTTP Fileaccess Allows Unauthenticated Read and Write Operations on Sensitive Filesystem Areas | 9.4 Critical | Updated |
| 2026-09-08 | CVE-2026-80465 | Siemens Mendix SAML Module JWT Algorithm Substitution Flaw Allows Unauthenticated Remote Authentication Bypass | 8.7 High | Updated |
| 2026-09-08 | CVE-2026-77393 | Inductive Automation Ignition Blank Project Role Creation Setting Allowed Any Authenticated User to Create Projects in Versions Up to 8.1.53 | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-64560 | Linux Kernel POSIX CPU Timer Use-After-Free via Non-Leader exec() Race on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-64552 | Linux Kernel virtio-net receive_big() Length Bounds Check Error Allows Malicious Device to Trigger Out-of-Bounds Write on Siemens SIMATIC S7-1500 MFP | 8.4 High | Updated |
| 2026-09-08 | CVE-2026-64545 | Linux Kernel XDP Master Redirect NULL Pointer Dereference on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-64423 | Linux Kernel IPv4 IGMP Use-After-Free During Network Device Teardown on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-64422 | Linux Kernel IPv4 TCP Reordering Sysctl and MTU Probe Size Validation Gap on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-64413 | Linux Kernel ebtables chainstack Array Not Zeroed Before Use on Siemens SIMATIC S7-1500 MFP | 7.0 High | Updated |
| 2026-09-08 | CVE-2026-64412 | Linux Kernel ebtables Module Name Not Null-Terminated Before Lookup on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-64411 | Linux Kernel ebtables Update Counter Path Does Not Null-Terminate Table Name Before Lookup on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-64375 | Linux Kernel proc ptrace_may_access Race via FD Links Not Locked by exec_update_lock on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-64317 | Linux Kernel ISO 9660 Rock Ridge Symlink Component Bounds Not Enforced Against SL Record on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-64279 | Linux Kernel I2C Adapter Deregistration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-62650 | Siemens Reyrolle 7SR5 Web Management Server-Side Authorization Not Enforced, Allowing Role-Based Access Control Bypass | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-62648 | Siemens Reyrolle 7SR5 Web Server URL Component Length Not Validated Before Use in Pre-Authenticated HTTP Messages, Enabling Denial of Service | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-62645 | Siemens Reyrolle 7SR5 Web Interface Exposes Session ID Calculation Information, Allowing Session Hijacking Without Credentials | 9.8 Critical | Updated |
| 2026-09-08 | CVE-2026-53400 | Linux Kernel I2C Adapter Registration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-53275 | Linux Kernel IPv6 Multicast MLD Query Processing Use-After-Free on Siemens SIMATIC S7-1500 MFP | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-53268 | Linux Kernel netfilter conntrack_irc Out-of-Bounds Read on Command Parse Failure on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-09-08 | CVE-2026-53239 | Linux Kernel xfrm Policy Inexact Bin Use-After-Free in xfrm_policy_bysel_ctx on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-53223 | Linux Kernel Timestamp Control Message Handling Gap in Non-Error Queue skbs on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-53050 | Linux Kernel Quota dquot_scan_active Race with Quota Deactivation on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-52999 | Linux Kernel netfilter nfnetlink_osf Out-of-Bounds Read in Option Matching on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-09-08 | CVE-2026-52998 | Linux Kernel netfilter nfnetlink_osf NULL Pointer Dereference in TTL Check on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-52986 | Linux Kernel SIP Conntrack NULL Pointer Dereference via Unsafe Port Parsing on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-09-08 | CVE-2026-52946 | Linux Kernel fcntl Async Signal Lock Order Inversion Between SOFTIRQ-Safe and SOFTIRQ-Unsafe Paths on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-52943 | Linux Kernel sk_buff Zerocopy Reference Missing in pskb_carve Helpers on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-52942 | Linux Kernel netfilter nf_log MAC Header Dump Not Guarded Against Unset Headers on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-52933 | Linux Kernel io_uring Poll Ownership Check Uses Signed Comparison, Creating Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-52912 | Linux Kernel netfilter nf_queue Bridge Device Reference Held Too Briefly in br_pass_frame_up on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-52910 | Linux Kernel BPF Reuseport cBPF Program Free Before RCU Grace Period on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-50093 | Siemens Siveillance Control Arbitrary File Upload Exploitable by Low-Privilege Authenticated Remote Attacker | 9.0 Critical | Updated |
| 2026-09-08 | CVE-2026-4740 | Red Hat Advanced Cluster Management lets a managed-cluster admin forge certificates for cross-cluster privilege escalation | 8.2 High | Updated |
| 2026-09-08 | CVE-2026-46323 | Linux Kernel GRO zcopy Frags Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-46306 | Linux Kernel Flow Dissector PPPoE PFC Frames Dissected When They Should Be Skipped on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-09-08 | CVE-2026-46303 | Linux Kernel ISO 9660 Rock Ridge CE Continuation Extent Not Validated Against Volume Size on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-09-08 | CVE-2026-46300 | Linux Kernel SKBFL_SHARED_FRAG Marker Lost During sk_buff Coalescing on Siemens SIMATIC S7-1500 MFP Enables ESP In-Place Decrypt over Page-Cache Memory | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-46173 | Linux Kernel Exit Path Race Causes Preemption of Oopsing TASK_DEAD Task on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-46037 | Linux Kernel IPv4 ICMP Extended Echo Reply Type Not Validated Before Pointer Use on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-09-08 | CVE-2026-46033 | Linux Kernel authencesn Instance Creation Accepts Short Hash Digests That Could Lead to Incorrect Authentication on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-09-08 | CVE-2026-46015 | Linux Kernel TCP Listener Migration Race on Siemens SIMATIC S7-1500 MFP After Listening Socket Closes | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-43501 | Linux Kernel IPv6 RPL Source Routing Header Recompression Buffer Headroom Not Reserved on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-09-08 | CVE-2026-43499 | Linux Kernel rtmutex Slow Lock Waiter Task Reference Incorrect in remove_waiter on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-43303 | Linux Kernel Page Allocator Free Path Leaves page->private Stale on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-43284 | Linux Kernel ESP In-Place Decrypt on Pipe-Spliced Shared Frags Risks Memory Corruption on Siemens SIMATIC S7-1500 MFP | 8.8 High | Updated |
| 2026-09-08 | CVE-2026-43116 | Linux Kernel netfilter ctnetlink Master Conntrack Access Without Sufficient Reference on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-43071 | Linux Kernel dcache Hashtable Out-of-Bounds Read When dhash_entries Set to 1 on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-09-08 | CVE-2026-31700 | Linux Kernel PACKET_VNET_HDR TOCTOU Race on mmap'd vnet_hdr in tpacket_snd on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-31449 | Linux Kernel ext4 Extent Tree Index Bounds Validation Gap on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-09-08 | CVE-2026-18963 | Siemens Industrial Edge Management Keycloak Reset-Credentials Flow Flaw Allows Unauthenticated Account Takeover | 9.1 Critical | Updated |
| 2026-09-08 | CVE-2025-46418 | Westermo WeOS OS Command Injection via Media Definition Requires Authenticated Attacker with High Privileges | 7.6 High | Updated |
| 2026-09-05 | CVE-2026-71474 | Red Hat insights-client logs a long-lived OpenShift pull-secret token that local pod-log access can expose | 7.1 High | Updated |
| 2026-09-03 | CVE-2026-78319 | Sauter modu680 Building Automation Controller TOCTOU Race Condition Allows Unauthenticated Remote Security Bypass | 9.3 Critical | Updated |
| 2026-09-03 | CVE-2026-65423 | open62541 OPC UA Integer Overflow in arrayDimensions Computation Allows Remote Attacker to Trigger Out-of-Bounds Write | 8.8 High | Updated |
| 2026-09-03 | CVE-2026-63559 | open62541 OPC UA Integer Overflow in arrayDimensions Computation Allows Remote Out-of-Bounds Heap Memory Read | 7.5 High | Updated |
| 2026-09-03 | CVE-2026-63035 | open62541 OPC UA TransferSubscriptions Service Heap Use-After-Free Allows Authenticated Attacker to Cause Denial of Service or Code Execution | 8.1 High | Updated |
| 2026-09-03 | CVE-2026-6071 | Rockwell Automation Arena Simulation Out-of-Bounds Write When Parsing DOE Files Enables Code Execution When a User Opens a Malicious File | 7.5 High | Updated |
| 2026-09-03 | CVE-2024-7956 | Rockwell Automation DataMosaix Private Cloud Authorization Flaw Lets Low-Privilege Users Access Other Users' Projects | 7.6 High | Updated |
| 2026-09-01 | CVE-2026-9637 | Rockwell Automation CompactLogix 5380 and ControlLogix 5580 CIP Message Input Length Validation Gap Causes Denial of Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9634 | Rockwell Automation Redundancy Module Configuration Tool DLL Search Order Hijack via Unquoted System Path | 7.0 High | Updated |
| 2026-09-01 | CVE-2026-9633 | Rockwell Automation Redundancy Module Configuration Tool DLL Search Order Hijack via Unquoted System Path in RM3ConfigTool.exe | 7.0 High | Updated |
| 2026-09-01 | CVE-2026-9625 | Rockwell Automation RSLinx Classic Oversized Embedded CIP Message Request Crashes Service, Requiring Manual Restart | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9624 | Rockwell Automation RSLinx Classic Integer Underflow on CIP Packet Data Length Validation Crashes Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9622 | Rockwell Automation RSLinx Classic Forward Close CIP Packet Handling Crash Requires Manual Service Restart | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-9621 | Rockwell Automation RSLinx Classic Crashes on Malformed CIP Packet Due to Integer Overflow, Requiring Manual Service Restart | 9.2 Critical | Updated |
| 2026-09-01 | CVE-2026-84235 | Rockwell Automation 1756-ENBT Module Crashes on Crafted CIP Packet, Requiring Device Restart to Recover | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-78317 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78316 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78315 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-78314 | Delta DIAEnergie SQL Injection Allows Authenticated Remote Code Execution | 8.8 High | Updated |
| 2026-09-01 | CVE-2026-35535 | Sudo Privilege Drop Failure in setuid/setgid Not Treated as Fatal Error, Enabling Privilege Escalation During Mailer Execution | 7.4 High | Updated |
| 2026-09-01 | CVE-2026-19472 | Rockwell Automation ArmorStart LT Embedded Web Server Crashes on Crafted HTTP PUT Request, Causing Denial of Service | 8.7 High | Updated |
| 2026-09-01 | CVE-2026-16675 | Rockwell Automation FactoryTalk Activation Manager Installer Custom Action Spawns SYSTEM-Level Console Window, Enabling Privilege Escalation | 8.5 High | Updated |
| 2026-09-01 | CVE-2026-13336 | Schneider Electric NetBotz 5 OS Command Injection During System Backup Restore Lets Authenticated Admin Execute Arbitrary Linux Commands | 7.3 High | Updated |
| 2026-09-01 | CVE-2026-12663 | Rockwell Automation ControlFLASH Installer Grants Write Access to Everyone Group on Installation Directory, Enabling Arbitrary Code Execution | 7.0 High | Updated |
| 2026-09-01 | CVE-2025-12768 | Rockwell Automation FactoryTalk Historian Machine Edition Out-of-Bounds Write Accessible to Low-Privilege Adjacent Network Attackers | 8.6 High | Updated |
| 2026-09-01 | CVE-2024-7953 | Rockwell Automation DataMosaix Private Cloud Lets Any Authenticated User Self-Promote to Project Administrator and Modify Project Data | 8.7 High | Updated |
| 2026-09-01 | CVE-2024-7952 | Rockwell Automation DataMosaix Private Cloud Hardcoded Source Code Links Expose JSON Files Containing Sensitive Data Without Authentication | 8.7 High | Updated |
| 2026-09-01 | CVE-2024-10085 | Schneider Electric EcoStruxure OPC UA Server Expert Unconstrained OPC UA Request Allocation Causes Denial of Service | 8.2 High | Updated |
| 2026-08-28 | CVE-2026-66155 | Siemens Element maps-ng Cross-Site Scripting in si-map Component Affects Multiple Software Versions | 7.6 High | Updated |
| 2026-08-28 | CVE-2026-64629 | Siemens Parasolid Out-of-Bounds Read on Specially Crafted File Parse Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59701 | Siemens Simcenter Femap Out-of-Bounds Read Parsing BMP Files Can Lead to Code Execution in the Current User Context | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59700 | Siemens Simcenter Femap Out-of-Bounds Read on Parsing Specially Crafted BMP Files Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-59086 | Siemens Simcenter Femap and Nastran Stack-Based Buffer Overflow When Parsing Specially Crafted Files Can Lead to Code Execution | 7.8 High | Updated |
| 2026-08-28 | CVE-2026-58115 | Siemens SIMATIC IoT2050 Advanced with Node-RED Does Not Enforce Authentication on Node-RED API Endpoint | 10.0 Critical | Updated |
| 2026-08-28 | CVE-2026-20094 | Cisco UCS Command Injection Scores 8.8 | 8.8 High | Updated |
| 2026-08-26 | CVE-2026-71276 | Magistrala Message Reader API Interpolates Unvalidated HTTP Query Parameters Directly into Raw SQL Queries | 7.1 High | Updated |
| 2026-08-26 | CVE-2026-71235 | Magistrala Rules Engine Lua Script Engine Performs No Input Validation, Allowing Authenticated Users to Execute Arbitrary Server-Side Code | 8.8 High | Updated |
| 2026-08-25 | CVE-2026-9128 | Rockwell Automation Studio 5000 Logix Designer Unquoted Search Path in External Tools Configuration Allows Low-Privilege Code Execution | 7.5 High | Updated |
| 2026-08-25 | CVE-2026-9127 | Rockwell Automation Studio 5000 Logix Designer External Tool Config File Incorrect Authorization Allows Any Authenticated User to Modify Tool Paths | 7.5 High | Updated |
| 2026-08-25 | CVE-2026-9108 | Rockwell Automation Studio 5000 Logix Designer Path Traversal via Malicious ACD Project File Allows Arbitrary File Write | 7.5 High | Updated |
| 2026-08-24 | CVE-2026-46333 | Linux Kernel ptrace Dumpability Logic Flaw Risks Privilege Escalation via Memory Image Exposure on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-08-24 | CVE-2026-21661 | Johnson Controls AC2000 Access Control System Uncontrolled Search Path Allows Authenticated Local Attacker to Leverage Configuration File Paths | 8.4 High | Updated |
| 2026-08-20 | CVE-2026-43038 | Linux Kernel IPv6 ICMP Error Generation Leaves skb2->cb[] Uncleared on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-08-17 | CVE-2026-25193 | Gallagher Command Centre Service Installer Log File Exposes Service Account Credentials During Installation | 8.1 High | Updated |
| 2026-08-14 | CVE-2026-32153 | Use-After-Free in Windows Speech Component Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-08-13 | CVE-2026-64125 | Linux Kernel bcmgenet Driver Enabling RBUF EEE and PM Bits Stops RX Traffic When MAC EEE Activates, Causing a Denial-of-Service Condition on Broadcom GENET Hardware | 9.8 Critical | Updated |
| 2026-08-11 | CVE-2026-33390 | Nozomi Networks Guardian Arc Sensor Sync Incorrectly Grants CLI Permissions to Low-Privileged Authenticated Users | 8.1 High | Updated |
| 2026-08-11 | CVE-2026-31984 | Nozomi Networks Guardian Audit Logging Missing Input Size Limit Allows Unauthenticated Attacker to Cause Denial of Service | 7.5 High | Updated |
| 2026-08-11 | CVE-2026-31982 | Nozomi Networks Guardian SAML Single Sign-On Open Redirect via Unvalidated Redirection Parameter Allows Unauthenticated Phishing Attack | 7.1 High | Updated |
| 2026-08-11 | CVE-2026-3014 | Milestone XProtect Management Server API Allows Users with Edit Permission to Execute OS Commands via Crafted Requests | 9.1 Critical | Updated |
| 2026-08-11 | CVE-2026-0287 | Palo Alto Networks PAN-OS Multiple Denial-of-Service Vulnerabilities Allow Unauthenticated Network Attacker to Disrupt Firewall Service | 7.5 High | Updated |
| 2026-08-11 | CVE-2026-0286 | Palo Alto Networks PAN-OS Management Plane Command Injection Allows Authenticated Administrator to Execute Arbitrary Root-Level OS Commands | 7.2 High | Updated |
| 2026-08-11 | CVE-2026-0284 | Palo Alto Networks PAN-OS LSVPN XML Injection Allows Unauthenticated Network Attacker to Inject Malicious Content | 9.9 Critical | Updated |
| 2026-08-11 | CVE-2026-0283 | Palo Alto Networks PAN-OS Large Scale VPN Authentication Bypass Allows Network Attackers to Bypass Security Restrictions | 7.2 High | Updated |
| 2026-08-11 | CVE-2026-0281 | Palo Alto Networks PAN-OS Web Session Token Exposed to Unauthenticated Network Attacker via Management Interface | 7.1 High | Updated |
| 2026-08-11 | CVE-2026-0280 | Palo Alto Networks PAN-OS IPv6 Packet Processing Flaw Allows Unauthenticated Attackers to Bypass Firewall Security Policy | 7.2 High | Updated |
| 2026-08-11 | CVE-2025-40833 | Siemens IE/PB LINK Null Pointer Dereference on Specially Crafted IPv4 Requests Causes Denial of Service Requiring Manual Reset | 7.5 High | Updated |
| 2026-08-10 | CVE-2026-16443 | Red Hat Build of Keycloak Cryptographic Signature Verification Flaw Scores 7.4 | 7.4 High | Updated |
| 2026-07-31 | CVE-2026-44106 | Phoenix Contact CHARX SEC Init-Script for User Applications Allows Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-31 | CVE-2026-44101 | Phoenix Contact CHARX OCPP Agent Service Missing Authentication Allows Unauthenticated Remote Attacker to Reconfigure Backend Connection | 9.8 Critical | Updated |
| 2026-07-31 | CVE-2026-44096 | Phoenix Contact CHARX SEC udhcpc Privilege Escalation Lets the charx-web User Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-31 | CVE-2026-44091 | Phoenix Contact CHARX SEC MQTT Broker Accepts Unauthenticated Malicious ID Injection That Creates Unauthorized Configuration Entries | 9.1 Critical | Updated |
| 2026-07-31 | CVE-2026-22620 | Eaton Tripp Lite PADM Authentication Component Input Validation Flaw Allows Unauthenticated Attackers to Gain Privileged Access | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-7849 | Phoenix Contact CHARX SEC Unauthenticated Remote Attacker Can Inject System Configuration Commands Executed as Root | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44108 | Phoenix Contact CHARX SEC Firewall Terminated Prematurely During System Shutdown Creates Temporary Window Exposing Internal Services | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44107 | Phoenix Contact CHARX SEC Modbus TCP Reboot Command Requires No Authentication When Port Is Open | 7.5 High | Updated |
| 2026-07-30 | CVE-2026-44104 | Phoenix Contact CHARX SEC Firmware Update Process for Base Module Lacks Cryptographic Signature Verification, Allowing Unauthenticated Remote Firmware Replacement | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-44100 | Phoenix Contact CHARX JupiCore Allows Unauthenticated Remote Attacker to Reconfigure Charging Points and Access Charging Point UIDs | 9.4 Critical | Updated |
| 2026-07-30 | CVE-2026-44099 | Phoenix Contact CHARX SEC EV Charging Controller System Configuration Flaw Lets Local Low-Privilege User Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44098 | Phoenix Contact CHARX SEC OCPP Backend Firewall Bypass Enables Unauthenticated Remote OS Command Execution | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-44097 | Phoenix Contact CHARX SEC Firmware Update REST Endpoint Accepts Arbitrary File Uploads from Low-Privileged Operator Accounts | 7.1 High | Updated |
| 2026-07-30 | CVE-2026-44095 | Phoenix Contact CHARX SEC Network Configuration Script Allows Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44094 | Phoenix Contact CHARX SEC Unauthenticated Remote Attacker Can Force Fallback to Firmware Partition with Default Credentials | 8.6 High | Updated |
| 2026-07-30 | CVE-2026-44093 | Phoenix Contact CHARX SEC Charging Controller Init-Script Flaw Enables Low-Privilege Local User to Execute Arbitrary Commands as Root | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-44092 | Phoenix Contact CHARX SEC ModbusServer Accepts Unvalidated MQTT Input, Letting Unauthenticated Backend-Control Attackers Inject Malicious Data | 9.1 Critical | Updated |
| 2026-07-30 | CVE-2026-44090 | Phoenix Contact CHARX SEC Unauthenticated MQTT Broker Accessible Behind Bypassed Firewall Risks Full Device Compromise | 9.8 Critical | Updated |
| 2026-07-30 | CVE-2026-14837 | Multiple Lenze Products Improper SSH Enable File Signature Verification Allows Low-Privilege Local Attacker to Bypass SSH Controls | 7.8 High | Updated |
| 2026-07-30 | CVE-2026-14354 | Schneider Electric EcoStruxure Cybersecurity Admin Expert Insufficient Credential Protection Allows Authentication Bypass and Unauthorized Credential Modification | 8.7 High | Updated |
| 2026-07-30 | CVE-2026-14169 | ads-tec Industrial IT DVG-IRF Incorrect Behavior Order Allows Low-Privilege Remote Attacker to Overwrite Existing User Passwords | 8.1 High | Updated |
| 2026-07-30 | CVE-2026-14168 | ads-tec Industrial IT DVG-IRF Missing Authorization at Configuration Table Insertion Path Grants Low-Privileged Users Full Administrator Access | 8.8 High | Updated |
| 2026-07-30 | CVE-2026-14167 | ads-tec Industrial IT DVG-IRF Router Incorrect Authorization Lets Low-Privileged Remote Users Make Administrator-Level Configuration Changes | 8.8 High | Updated |
| 2026-07-30 | CVE-2026-12927 | Schneider Electric IGSS Definition Out-of-Bounds Write in Malicious CGF File Import Risks Arbitrary Code Execution | 8.4 High | Updated |
| 2026-07-30 | CVE-2026-0667 | Schneider Electric SCADAPack Failure to Handle Unusual Communication Conditions Risks Arbitrary Code Execution and Full Data Loss | 9.3 Critical | Updated |
| 2026-07-24 | CVE-2026-5726 | Delta ASDA-Soft Stack-Based Buffer Overflow Allows Code Execution via Malicious File | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-44469 | CODESYS Development System Administrative Installer Extracts Files to World-Writable Temp Directory, Enabling TOCTOU Privilege Escalation | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-44468 | CODESYS Development System Administrative Installer Creates Directory with Insecure Default Permissions | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-33105 | Critical Authorization Bypass in Microsoft Azure Kubernetes Service Allows Network Privilege Escalation | 10.0 Critical | Updated |
| 2026-07-24 | CVE-2026-31790 | Siemens SIMATIC CN 4100 OpenSSL RSASVE Key Encapsulation Sends Uninitialized Memory Contents to Peers | 7.5 High | Updated |
| 2026-07-24 | CVE-2026-31789 | Siemens SIMATIC CN 4100 OpenSSL 32-Bit Heap Buffer Overflow When Converting Excessively Large OCTET STRING to Hexadecimal | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2026-31405 | Linux Kernel DVB-net ULE Extension Handler Uses a Network-Controlled Index into a 255-Entry Table Without Bounds Checking, Enabling Out-of-Bounds Reads and Writes | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2026-31403 | Linux Kernel NFSD Network Reference Not Held for Full /proc/fs/nfs/exports Lifetime on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-31402 | Linux Kernel NFSv4.0 LOCK Replay Cache Heap Overflow Corrupts Memory on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2026-31389 | Linux Kernel SPI Controller Registration Failure Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-28387 | Siemens SIMATIC CN 4100 OpenSSL DANE TLSA Use-After-Free in Uncommon Server Authentication Configuration | 8.1 High | Updated |
| 2026-07-24 | CVE-2026-23458 | Linux kernel ctnetlink multi-round dump dereferences freed conntrack pointer in second callback invocation | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-23457 | Linux Kernel SIP Content-Length Integer Truncation in nf_conntrack on Siemens SIMATIC S7-1500 MFP | 8.6 High | Updated |
| 2026-07-24 | CVE-2026-23456 | Linux Kernel netfilter H.323 Conntrack Out-of-Bounds Read in DecodeQ931 Integer Decode on Siemens SIMATIC S7-1500 MFP | 8.2 High | Updated |
| 2026-07-24 | CVE-2026-23455 | Linux Kernel H.323 Conntrack DecodeQ931 Reads Past Zero-Length UserUserIE Field on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-07-24 | CVE-2026-23454 | Linux Kernel MANA Network Driver Use-After-Free in HWC Channel Teardown Reordering on Siemens SIMATIC S7-1500 MFP | 7.0 High | Updated |
| 2026-07-24 | CVE-2026-23450 | Linux Kernel SMC-over-TCP SYN Receive Path Calls sock_hold Then Schedules a tcp_close Work Item Without Synchronizing Against Concurrent Stack Cleanup, Enabling Use-After-Free and Null Dereference | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2026-23434 | Linux Kernel NAND Flash Lock/Unlock Not Serialized Against Other NAND Operations on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-07-24 | CVE-2026-23429 | Linux Kernel IOMMU SVA Use-After-Free in Unbind Path Scores 7.8 | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-23424 | Linux Kernel amdxdna Missing Command Buffer Validation Scores 7.1 | 7.1 High | Updated |
| 2026-07-24 | CVE-2026-23422 | Linux Kernel dpaa2-switch Out-of-Bounds Write from Malformed Interrupt Scores 7.8 | 7.8 High | Updated |
| 2026-07-24 | CVE-2026-23419 | Linux kernel rds_tcp_tune circular locking dependency causes deadlock via sk_net_refcnt_upgrade | 7.5 High | Updated |
| 2026-07-24 | CVE-2025-15620 | Belden HiOS Switch Platform Web Interface Denial of Service via Unauthenticated Request Allows Remote Attacker to Trigger Device Reboot | 8.6 High | Updated |
| 2026-07-24 | CVE-2025-14859 | Semtech LR11xx LoRa Transceiver Secure Boot Uses Non-Standard Hashing Algorithm That Weakens Firmware Authentication | 7.0 High | Updated |
| 2026-07-24 | CVE-2024-14034 | Belden Hirschmann HiEOS LRS11 HTTP Management Module Authentication Bypass Grants Unauthenticated Attackers Administrator Access | 9.8 Critical | Updated |
| 2026-07-24 | CVE-2024-14033 | Belden Hirschmann EagleSDV TLS Session Establishment Denial of Service via Protocol Downgrade Exploit | 7.5 High | Updated |
| 2026-07-24 | CVE-2023-7343 | Belden Hirschmann Industrial HiVision Arbitrary Code Execution Triggered When Administrator Opens Maliciously Crafted Project File | 7.8 High | Updated |
| 2026-07-24 | CVE-2023-7342 | Belden HiSecOS EAGLE Web Server Prior to 04.1.00 Privilege Escalation Allows Operator or Auditor to Gain Administrator Access | 8.8 High | Updated |
| 2026-07-24 | CVE-2022-4987 | Belden Hirschmann Industrial HiVision External Application Execution Flaw Allows Local Attacker to Escalate Privileges | 7.3 High | Updated |
| 2026-07-24 | CVE-2022-4986 | Belden Hirschmann EagleSDV Denial of Service During TLS 1.0/1.1 Session Establishment via Crafted Handshake | 7.5 High | Updated |
| 2026-07-24 | CVE-2021-4477 | Belden Hirschmann HiLCOS OpenBAT IPv6 IPsec Firewall Bypass Allows Traffic from VPN Connections to Evade Configured Rules | 9.1 Critical | Updated |
| 2026-07-24 | CVE-2020-37216 | Belden Hirschmann HiOS Devices Prior to 08.1.00 Crash on Improper EtherNet/IP Packet Length Handling | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-8047 | CODESYS Runtime HTTP Request Length Check Flaw Enables Unauthenticated Remote Out-of-Bounds Write and Denial of Service | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-8046 | CODESYS Runtime Insufficient Authorization on User Account Deletion Allows Low-Privilege Remote User to Delete Any User | 8.1 High | Updated |
| 2026-07-23 | CVE-2026-46749 | Siemens SINEC INS Hardcoded Static Salt in Password Hashing Shared Across All Users Weakens Stored Credential Security | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-46748 | Siemens SINEC INS Binary with cap_dac_override Capability Set Allows Low-Privilege User to Read or Write Arbitrary Files | 8.8 High | Updated |
| 2026-07-23 | CVE-2026-46746 | Siemens SINEC INS sftp Upload API Unsanitized Input Allows Authenticated Remote Users to Inject OS Commands | 8.8 High | Updated |
| 2026-07-23 | CVE-2026-42542 | TDengine taosd Integer Underflow in RPC Handler Lets Unauthenticated Attackers Crash the Server With One Packet | 7.5 High | Updated |
| 2026-07-23 | CVE-2026-24349 | Siemens SIMATIC WinCC Unified PC Runtime Stores Sensitive Information in Cleartext in Configuration Files | 7.1 High | Updated |
| 2026-07-22 | CVE-2026-41032 | Phoenix Contact CHARX SEC Controller Log Files Downloadable by Adjacent Unauthenticated Attacker, Disclosing Restricted Information | 7.5 High | Updated |
| 2026-07-22 | CVE-2026-35085 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in gdv-serverconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35084 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in dali-devconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35083 | MBS Universal Gateway User-Privilege Remote Stack Buffer Overflow in bac-serverconfig Allows Root-Level Code Execution | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35082 | MBS Universal Gateway ugw-logread Method Allows Authenticated Remote Users to Read Arbitrary Local Files | 8.8 High | Updated |
| 2026-07-22 | CVE-2026-35081 | MBS Universal Gateway ugw-logstop Method Allows Authenticated Remote Users to Terminate Arbitrary System Processes | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35080 | MBS Universal Gateway ugw-restoreinfo Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35079 | MBS Universal Gateway ugw-restore Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35078 | MBS Universal Gateway ugw-logstop Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35077 | MBS Universal Gateway ugw-delete-file Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35076 | MBS Universal Gateway bac-scanresult Method Allows Authenticated Remote Users to Delete Arbitrary Local Files | 8.1 High | Updated |
| 2026-07-22 | CVE-2026-35075 | MBS Universal Gateway Default Hard-Coded Password Recoverable from Firmware Image Allows Full Unauthenticated Access | 9.8 Critical | Updated |
| 2026-07-22 | CVE-2026-14448 | MB Connect Line Remote Portal OS Command Injection in Certificate Management View Exploitable by High-Privilege Remote Attacker | 7.2 High | Updated |
| 2026-07-22 | CVE-2025-14774 | ABB T-MAC Plus Incorrect Authorization Allows Adjacent Unauthenticated Attacker to Cause Denial of Service | 7.4 High | Updated |
| 2026-07-22 | CVE-2025-14773 | ABB T-MAC Plus Cross-Site Scripting Vulnerability Allows Authenticated Low-Privilege Attacker to Execute Malicious Scripts | 8.0 High | Updated |
| 2026-07-22 | CVE-2025-14772 | ABB T-MAC Plus Authorization Bypass via User-Controlled Key Allows Authenticated Users to Access Other Users' Resources | 8.8 High | Updated |
| 2026-07-22 | CVE-2025-14771 | ABB T-MAC Plus Exposes Sensitive Files and Directories to External Network Access | 9.9 Critical | Updated |
| 2026-07-22 | CVE-2024-14036 | Dräger Core 1.0.5 and M540 Converter Service Denial of Service via Specially Crafted Unencrypted Network Packets | 7.5 High | Updated |
| 2026-07-22 | CVE-2022-4992 | Dräger Infinity Acute Care System and M540 Patient Monitors Network Message Handling Flaw Risks Data Integrity Across Multiple Software Versions | 8.6 High | Updated |
| 2026-07-22 | CVE-2021-4481 | Dräger Protector Software Insecure File System Permissions Allow Local Attacker to Execute Arbitrary Code with System-Level Privileges | 8.2 High | Updated |
| 2026-07-22 | CVE-2021-4480 | Dräger Protector Software Insecure File System Permissions Allow Local Attacker to Execute Arbitrary Code with Elevated Privileges | 8.2 High | Updated |
| 2026-07-22 | CVE-2021-4478 | Dräger CC-Vision Basic and E-Cal Out-of-Bounds Write on Loading Crafted GDT File Can Cause Buffer Overflow | 8.2 High | Updated |
| 2026-07-22 | CVE-2019-25722 | Dräger SC Patient Monitoring Devices Contain Hard-Coded Plaintext Credentials and Local Denial-of-Service Vulnerability in Source Code | 7.6 High | Updated |
| 2026-07-22 | CVE-2019-25719 | Dräger Infinity Acute Care System and M540 Patient Monitors Contain Network Message Handling Vulnerabilities Affecting Confidentiality and Integrity | 8.6 High | Updated |
| 2026-07-22 | CVE-2019-25718 | Dräger Infinity Explorer C700 Kiosk Mode Escape Allows Privilege Escalation to Underlying Operating System | 8.4 High | Updated |
| 2026-07-21 | CVE-2026-23425 | Linux Kernel KVM arm64 ID Register Initialization Flaw Scores 8.8 | 8.8 High | Updated |
| 2026-07-21 | CVE-2018-25237 | Belden Hirschmann HiSecOS Classic Firewall HTTPS Login Buffer Overflow with RADIUS Authentication Allows Remote Crash | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2018-25236 | Belden Hirschmann HiOS and HiSecOS Products HTTP Management Module Authentication Bypass Allows Unauthenticated Remote Access | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20238 | Belden Hirschmann Industrial HiVision 06.0.00/07.0.00 Improper Authorization Allows Read-Only Users to Gain Write Access to Managed Devices | 7.1 High | Updated |
| 2026-07-21 | CVE-2017-20237 | Belden Hirschmann Industrial HiVision Prior to 06.0.07 Authentication Bypass in Master Service Allows Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20236 | ProSoft Technology ICX35-HWC Cellular Gateway Web Interface Input Validation Flaw Allows Unauthenticated Remote OS Command Injection | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2017-20235 | ProSoft Technology ICX35-HWC Cellular Gateway Web Interface Authentication Bypass Grants Unauthenticated Attackers Administrator Access | 9.1 Critical | Updated |
| 2026-07-21 | CVE-2017-20234 | Belden GarrettCom Magnum 6K/10K Managed Switches Hard-Coded Authentication String Allows Unauthenticated Admin Access | 9.8 Critical | Updated |
| 2026-07-21 | CVE-2016-15058 | Belden Hirschmann HiLCOS Classic Platform Stores User Passwords in Recoverable Format, Exposing Credentials to Adjacent Unauthenticated Attackers | 8.1 High | Updated |
| 2026-07-21 | CVE-2015-10148 | Belden Hirschmann HiLCOS Devices Shipped with Hardcoded SSH and SSL Keys That Cannot Be Changed | 8.2 High | Updated |
| 2026-07-15 | CVE-2026-8314 | Rockwell Automation Arena Simulation Memory Corruption in siman.exe Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8313 | Rockwell Automation Arena Simulation Memory Corruption in linker.exe Siman Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8312 | Rockwell Automation Arena Simulation Memory Corruption in expmt.exe Siman Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-8085 | Rockwell Automation Arena Simulation Memory Corruption in model.exe Component via Malformed File Data | 7.3 High | Updated |
| 2026-07-15 | CVE-2026-56451 | Siemens Opcenter X Skips JWT Algorithm Validation, Letting Unauthenticated Attackers Forge Arbitrary Tokens and Bypass Authentication; CVSS 10.0 | 10.0 Critical | Updated |
| 2026-07-15 | CVE-2026-54429 | Siemens SIMATIC S7-PLCSIM Advanced High-Volume Multicast Traffic Exhausts Device Memory, Causing Denial of Service | 7.4 High | Updated |
| 2026-07-15 | CVE-2026-39304 | Apache ActiveMQ NIO SSL Transports Vulnerable to Denial-of-Service via Memory Exhaustion | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-9653 | Rockwell Automation 1756-EN2 and EN3 CIP Implicit Connection Validation Flaw Allows Network Attacker to Cause Denial of Service | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-9650 | Schneider Electric EasyLogic T150/Saitel DR Credentials Stored in Filesystem Accessible to Unauthenticated Attackers | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-9636 | Rockwell Automation ControlLogix and CompactLogix CIP Security Certificate Revocation Check Flaw Allows Revoked Certificates to Authenticate | 8.2 High | Updated |
| 2026-07-14 | CVE-2026-9292 | Rockwell Automation FactoryTalk DataMosaix Private Cloud Stored Cross-Site Scripting in Workflows Configuration Requires Admin Interaction | 8.4 High | Updated |
| 2026-07-14 | CVE-2026-9140 | Rockwell Automation 1718/1719-AENTR I/O Module UDP Unicast Network Storm Causes Device to Lose Communication | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-5928 | GNU C Library ungetwc Multibyte Encoding Overlap Flaw Affects Siemens SIMATIC S7-1500 MFP and Multiple Vendor Products | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-5450 | GNU C Library scanf Heap Buffer Overflow on Wide Character Match with Large Format Width Affects Siemens SIMATIC S7-1500 MFP and Other Products | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-5435 | GNU C Library Deprecated DNS Print Functions Ignore Caller Buffer Length, Affecting Siemens SIMATIC S7-1500 MFP and Related Vendor Products | 7.3 High | Updated |
| 2026-07-14 | CVE-2026-46174 | Linux Kernel AMD Zen2 Op Cache Improper Resource Isolation on Siemens SIMATIC S7-1500 MFP Enables Cross-Process Leakage | 8.8 High | Updated |
| 2026-07-14 | CVE-2026-43057 | Linux Kernel IPv6 Tunneled Traffic Checksum GSO Fallback Incorrectly Handled on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-43040 | Linux Kernel IPv6 NDISC Router Advertisement User Option Leaves Padding Fields Uninitialized on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-43033 | Linux Kernel authencesn Out-of-Place Decryption Writes hiseq at Wrong Destination on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-43030 | Linux Kernel BPF Verifier Incorrect Packet Pointer Safety Check on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-43028 | Linux Kernel netfilter x_tables Name Null-Termination Gap Risks Out-of-Bounds Read on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-43027 | Linux Kernel netfilter CT Helper Pass-Through on Expect Cleanup on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-43025 | Linux Kernel netfilter ctnetlink Helper Out-of-Bounds Read on New Expectations on Siemens SIMATIC S7-1500 MFP | 7.3 High | Updated |
| 2026-07-14 | CVE-2026-43011 | Linux Kernel X.25 Socket Double-Free of skb on Memory Allocation Failure on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31768 | Linux Kernel TI ADC SPI Read Uses Non-DMA-Safe Stack Buffer on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31761 | Linux Kernel IIO Gyro MPU3050 Device Registration Race Condition on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31682 | Linux Kernel Bridge Neighbor Discovery Sends ND Options Parsing Without Linearizing skb First on Siemens SIMATIC S7-1500 MFP | 9.1 Critical | Updated |
| 2026-07-14 | CVE-2026-31680 | Linux Kernel IPv6 Flow Label Exclusive Option Freed Before RCU Teardown on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31674 | Linux Kernel IPv6 Routing Match addrnr Exceeding IP6T_RT_HOPS Causes Out-of-Bounds Read on Siemens SIMATIC S7-1500 MFP | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-31669 | Linux Kernel MPTCP slab-use-after-free in __inet_lookup_established via Lockless ehash Table Walk on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31665 | Linux Kernel nftables CT Timeout Object Use-After-Free on Destroy on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31649 | Linux Kernel stmmac Ethernet Chain Mode Integer Underflow on Jumbo Frame Transmission on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31563 | Linux Kernel MACB Network Driver Frees TX sk_buff in IRQ-Disabled Context Using Wrong Function on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-31533 | Linux Kernel TLS Encryption EBUSY Error Path Use-After-Free on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31508 | Linux Kernel Open vSwitch Teardown Releases Network Device Before Completion on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31507 | Linux Kernel SMC double-free of smc_spd_priv When tee() Duplicates Splice Pipe Buffer on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31504 | Linux Kernel PACKET Socket Fanout Use-After-Free via NETDEV_UP Race in packet_release on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31494 | Linux Kernel MACB Ethernet Driver Queue Statistics Array Size Mismatch on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31485 | Linux Kernel SPI FSL LPSPI Teardown Order Use-After-Free on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31469 | Linux Kernel virtio_net Use-After-Free in Destination Route on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31452 | Linux Kernel ext4 Inline-to-Extents Conversion Missing When Truncation Exceeds Inline Data Size on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31450 | Linux Kernel ext4 jinode Published Before Initialization Completes on Siemens SIMATIC S7-1500 MFP | 8.8 High | Updated |
| 2026-07-14 | CVE-2026-31448 | Linux Kernel ext4 mkdir/mknod Logical to Physical Block Mapping Infinite Loop via Residual Data on Siemens SIMATIC S7-1500 MFP | 9.4 Critical | Updated |
| 2026-07-14 | CVE-2026-31447 | Linux Kernel ext4 Rejects Mount of bigalloc Filesystems with s_first_data_block Not Zero on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31446 | Linux kernel ext4 use-after-free in update_super_work races with unmount after sysfs unregistration | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-31417 | Linux Kernel X.25 Packet Fragment Length Integer Overflow on Siemens SIMATIC S7-1500 MFP | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-31414 | Linux Kernel netfilter Conntrack Expectation Helper Name Resolved from Wrong Source on Siemens SIMATIC S7-1500 MFP | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-31396 | Linux Kernel MACB Network Driver PTP Clock Use-After-Free on Interface Open and Close on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-25789 | Siemens SIMATIC S7-1500 MFP Web Interface Filename Validation Gap on Firmware Update Page Enables Social Engineering Attack | 7.1 High | Updated |
| 2026-07-14 | CVE-2026-25787 | Siemens SIMATIC S7-1500 MFP Web Interface Stored Cross-Site Scripting in Technology Object Name Field Exploitable by Authenticated Attacker | 9.1 Critical | Updated |
| 2026-07-14 | CVE-2026-25786 | Siemens SIMATIC S7-1500 MFP Web Interface Stored Cross-Site Scripting in PLC Name Field Exploitable by Authenticated Attacker | 9.1 Critical | Updated |
| 2026-07-14 | CVE-2026-23449 | Linux Kernel Network Scheduler TEQL Double-Free with Lockless Qdisc Root on Siemens SIMATIC S7-1500 MFP | 7.8 High | Updated |
| 2026-07-14 | CVE-2026-23414 | Linux Kernel TLS Memory Leak in Async Decrypt Wait Scores 7.5 | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-12659 | Rockwell Automation FLEX 5000 EtherNet/IP Adapter Improper CIP Packet Exception Handling Causes Denial of Service Requiring Manual Restart | 8.7 High | Updated |
| 2026-07-14 | CVE-2026-10714 | Rockwell Automation FactoryTalk Services Platform JWT Signature Bypass in Okta Web Authentication Allows Attacker to Impersonate Users | 8.8 High | Updated |
| 2026-07-14 | CVE-2026-0265 | Palo Alto Networks PAN-OS Authentication Bypass Affects Siemens RUGGEDCOM APE1808, Scores 8.1 | 8.1 High | Updated |
| 2026-07-14 | CVE-2026-0264 | Critical Palo Alto Networks PAN-OS DNS Heap Overflow Affects Siemens RUGGEDCOM APE1808, Scores 9.8 | 9.8 Critical | Updated |
| 2026-07-14 | CVE-2026-0262 | Palo Alto Networks PAN-OS Multiple Denial-of-Service Flaws Affect Siemens RUGGEDCOM APE1808 | 7.5 High | Updated |
| 2026-07-14 | CVE-2026-0261 | Palo Alto Networks PAN-OS Command Injection Affects Siemens RUGGEDCOM APE1808, Scores 7.2 | 7.2 High | Updated |
| 2026-07-14 | CVE-2026-0258 | Palo Alto Networks PAN-OS IKEv2 SSRF Affects Siemens RUGGEDCOM APE1808, Scores 9.1 | 9.1 Critical | Updated |
| 2026-07-09 | CVE-2026-54801 | Siemens CPCI85 and SICORE Password Change Accepts New Password Without Verifying Current One | 7.2 High | Updated |
| 2026-07-08 | CVE-2026-46279 | Linux Kernel Page Extension Initialization Leaves Codetag Uninitialized for Pages Allocated Before page_ext Is Ready | 7.8 High | Updated |
| 2026-07-08 | CVE-2026-20151 | Cisco Smart Software Manager On-Prem Leaks Sensitive Data in Transmitted Requests | 7.3 High | Updated |
| 2026-07-07 | CVE-2026-40141 | A critical query-injection flaw in BeyondTrust Remote Support lets low-privileged users reach unauthorized resources, CVSS 9.9 | 9.9 Critical | Updated |
| 2026-07-07 | CVE-2026-40140 | Unauthenticated attackers can crash BeyondTrust Remote Support appliances via a network-communication flaw | 7.5 High | Updated |
| 2026-07-07 | CVE-2026-40139 | Critical Pre-Authentication Bypass in BeyondTrust Remote Support Allows Unauthorized Access | 9.8 Critical | Updated |
| 2026-07-07 | CVE-2026-40138 | BeyondTrust Privileged Remote Access Shares Pre-Authentication Bypass Flaw with Remote Support | 8.1 High | Updated |
| 2026-07-02 | CVE-2026-53225 | Linux Kernel SCTP ASCONF Lookup Reads Past the Validated Header Boundary, Exposing Uninitialized Memory to Downstream Address Parameter Processing | 9.1 Critical | Updated |
| 2026-07-02 | CVE-2026-20155 | Cisco Evolved Programmable Network Manager Missing Authorization Scores 8.0 | 8.0 High | Updated |
| 2026-07-01 | CVE-2026-9717 | Schneider Electric PowerLogic P7 OS Command Injection in Admin-Privileged Context Allows Unauthorized Command Execution | 7.2 High | Updated |
| 2026-07-01 | CVE-2026-9716 | Schneider Electric PowerLogic P7 NULL Pointer Dereference Renders HMI and Configuration Interface Unavailable via Malformed Requests | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-20160 | Critical Cisco Smart Software Manager On-Prem Resource Exposure Scores 9.8 | 9.8 Critical | Updated |
| 2026-07-01 | CVE-2026-14193 | Delta DVP80ES300T PLC Improper Array Index Validation Creates Remote Denial-of-Service Exposure | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-12579 | Delta AS228T Authentication Bypass Vulnerability Allows Unauthenticated Access Without Valid Credentials | 7.4 High | Updated |
| 2026-07-01 | CVE-2026-12577 | Delta DVP80ES3 PLC Improperly Implemented Security Check Allows Bypassing Standard Protocol Verification | 8.7 High | Updated |
| 2026-07-01 | CVE-2026-12576 | Delta DVP80ES3 PLC Communication Channel Message Integrity Not Enforced, Allowing Message Substitution | 7.5 High | Updated |
| 2026-07-01 | CVE-2026-12575 | Delta DVP80ES3 PLC Improper Resource Release Creates Remote Denial-of-Service Exposure | 7.5 High | Updated |
| 2026-06-30 | CVE-2026-12578 | Delta DTMSoft Deserialization of Untrusted Data Allows Attacker to Execute Arbitrary Code | 8.4 High | Updated |
| 2026-06-30 | CVE-2026-10763 | Hitachi Energy PROMOD V Uses Unencrypted HTTP for Digipede Server Communication, Exposing Data to Interception | 7.0 High | Updated |
| 2026-06-29 | CVE-2026-22925 | Siemens SIMATIC CN 4100 TCP SYN Flood Exhausts Available Resources and Causes Denial of Service | 7.5 High | Updated |
| 2026-06-29 | CVE-2026-22924 | Siemens SIMATIC CN 4100 Accepts Unlimited Unauthenticated Connections, Enabling Remote Resource Exhaustion and Denial of Service | 9.1 Critical | Updated |
| 2026-06-29 | CVE-2025-40949 | Siemens RUGGEDCOM ROX OS Command Injection Lets Authenticated Administrators Execute Root-Level Commands Across Multiple Platform Generations | 9.1 Critical | Updated |
| 2026-06-29 | CVE-2025-40947 | Siemens RUGGEDCOM ROX Authenticated OS Command Injection Requires Low Privilege and Network Access Across Multiple Platform Generations | 7.5 High | Updated |
| 2026-06-27 | CVE-2024-54013 | Hanwha Vision Network Camera Web Server Request Handling Flaw Exposes Protected Functions to Adjacent Unauthenticated Attackers | 8.8 High | Updated |
| 2026-06-24 | CVE-2026-6866 | Schneider Electric EcoStruxure Panel Server Credentials Revert to Insecure Initial Settings After Rare Event, Disclosing Sensitive Information | 7.5 High | Updated |
| 2026-06-23 | CVE-2026-10521 | MB Connect Line mbconnect24 Hidden Configuration Method Accessible to High-Privilege Attackers Allows Critical Parameter Modification | 7.2 High | Updated |
| 2026-06-22 | CVE-2026-8024 | iba ibaPDA and ibaDatCoordinator Deserialization of Untrusted Data Allows Unauthenticated Remote Attacker to Gain Full System Access | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-6888 | Advantech SaaS Composer Authenticated Admin SQL Injection Allows Remote Command Execution via Specific API Interface | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-6865 | Schneider Electric EasyLogic T150 Path Traversal in User-Supplied Input Allows Unauthorized Access to Sensitive Files | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-6332 | Schneider Electric EcoStruxure Machine Expert HVAC Stores Sensitive Source Code in Cleartext, Risking Disclosure of Protected Intellectual Property | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-5416 | Turck Managed Ethernet Switch OS Command Injection via Name Parameter Exploitable by Low-Privilege Remote Attacker | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-5387 | AVEVA Pipeline Simulation 2025 Allows Unauthenticated Access to Instructor and Simulator Developer Administrative Operations | 9.3 Critical | Updated |
| 2026-06-17 | CVE-2026-4827 | Schneider Electric Easergy MiCOM C264 Insufficient Session Token Entropy Allows Network Attacker to Compromise Sessions | 8.7 High | Updated |
| 2026-06-17 | CVE-2026-43296 | Linux Kernel octeontx2-af NIC SQ Manager Sticky Mode Causes Stalls and Potential PSE Deadlock When Multiple Queues Share an SMQ | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-41551 | Siemens ROS# Path Traversal in User-Supplied Input Allows Unauthenticated Remote Attacker to Read or Write Arbitrary Files | 9.1 Critical | Updated |
| 2026-06-17 | CVE-2026-4116 | SonicWall SMA1000 Mishandles Unicode Encoding in TOTP Validation, Allowing an Authenticated SSLVPN User to Bypass Two-Factor Authentication | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-4113 | SonicWall SMA1000 Distinguishable Authentication Error Responses Allow a Remote Attacker to Enumerate SSL VPN User Accounts | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-4112 | SonicWall SMA1000 SQL Injection in the SSLVPN Component Allows a Read-Only Administrator to Escalate to Primary Administrator | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-40852 | MB Connect Line mbNET/mbNET.rokey High-Privilege Config Generator OS Command Injection via Unsanitized Config Value | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-40851 | MB Connect Line mbNET/mbNET.rokey USB Config File Parser Confusion Attack Allows Local Attacker to Achieve Code Execution | 8.4 High | Updated |
| 2026-06-17 | CVE-2026-40850 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getAccountData Function Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40836 | MB Connect Line and Helmholz Remote Portal SQL Injection in inmessage Model DELETE Command Allows Low-Privilege Database Access | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40834 | MB Connect Line and Helmholz Remote Portal SQL Injection in dash_layout.php Dashboard Layout Function Exposes Database to Low-Privileged Attackers | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40833 | MB Connect Line and Helmholz Remote Portal SQL Injection in Dashboard Layout Function Exposes Database to Low-Privileged Remote Users | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-40819 | MB Connect Line Remote Portal Unauthenticated SQL Injection in sync_data24 Task Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40818 | MB Connect Line Remote Portal Unauthenticated SQL Injection in _mb24confi_getDevice Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40817 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getAlarmProfiles Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40816 | MB Connect Line Remote Portal Unauthenticated SQL Injection in Alarm Configuration Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40815 | MB Connect Line Remote Portal Unauthenticated SQL Injection in _mb24api_getUserAccount Function Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40814 | MB Connect Line Remote Portal Unauthenticated SQL Injection in dataapi.php _mb24confi_getTagAlarm Function Exposes Database | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40813 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getLiveValues tagid Parameter Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40812 | MB Connect Line Remote Portal Unauthenticated SQL Injection in getLiveValues sn Parameter Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40811 | MB Connect Line Remote Portal Unauthenticated SQL Injection in ssoabstractservice SELECT Command Exposes Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-40810 | MB Connect Line Remote Portal Unauthenticated SQL Injection in userinfo Endpoint Exposes Full Database Contents | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33893 | Siemens Teamcenter Hard-Coded Credentials in Multiple Versions Allow Unauthenticated Remote Access to Sensitive Data | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33892 | Siemens Industrial Edge Management Authentication Sequence Weakness Allows Unauthorized Actions via Phishing in Affected Versions | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-33862 | Siemens Teamcenter Cross-Site Scripting Requires Low-Privilege Attacker and User Interaction, Risks Full Session Compromise | 7.3 High | Updated |
| 2026-06-17 | CVE-2026-33616 | MB Connect Line mbconnect24 Blind SQL Injection in mb24api Endpoint Gives Unauthenticated Attackers Full Database Read Access | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33615 | MB Connect Line mbconnect24 Unauthenticated SQL Injection in setinfo Endpoint Allows Arbitrary Data Write via UPDATE Command | 9.1 Critical | Updated |
| 2026-06-17 | CVE-2026-33614 | MB Connect Line mbconnect24 Unauthenticated SQL Injection in getinfo Endpoint Exposes Full Database via SELECT Command | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-33613 | MB Connect Line mbconnect24 Admin-Authenticated OS Command Injection in generateSrpArray Function Allows Full System Compromise | 7.2 High | Updated |
| 2026-06-17 | CVE-2026-3323 | Vega vegapuls Level Sensor Unsecured Configuration Interface Exposes Hashed Credentials and Access Codes to Unauthenticated Remote Attackers | 7.5 High | Updated |
| 2026-06-17 | CVE-2026-32091 | Race Condition in Microsoft Brokering File System Allows Unauthorized Privilege Escalation | 8.4 High | Updated |
| 2026-06-17 | CVE-2026-31693 | Linux kernel CIFS replay path missing variable reinitializations causes undefined behavior on request retry | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-31568 | Linux kernel s390/mm missing secure storage access fixups for donated pages causes kernel context exceptions | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-31426 | Linux kernel ACPI EC address space handler persists after probe failure leaves dangling pointer | 7.0 High | Updated |
| 2026-06-17 | CVE-2026-27914 | Improper Access Control in Microsoft Management Console Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-27909 | Use-After-Free in Windows Search Component Allows Authorized Attacker to Escalate Privileges | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-27668 | Siemens RUGGEDCOM CROSSBOW Secure Access Manager User Administrators Can Administer Groups They Belong To, Enabling Privilege Escalation | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-27662 | Siemens SIMATIC HMI Unified Comfort Panel Web Browser Accessible Without Authentication When No Security Mechanism Is Configured | 7.7 High | Updated |
| 2026-06-17 | CVE-2026-26181 | Use-After-Free in Microsoft Brokering File System Lets Authorized User Escalate Privileges | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-26170 | Input Validation Flaw in Microsoft PowerShell Allows Local Privilege Escalation | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-25654 | Siemens SINEC NMS Password Reset Request Authorization Not Validated, Allowing Authenticated User to Reset Any Account Password | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-24032 | Siemens SINEC NMS UMC Authentication Weakness Allows Forged User Identity Due to Insufficient Validation | 7.3 High | Updated |
| 2026-06-17 | CVE-2026-23428 | Critical Linux Kernel ksmbd Use-After-Free in Compound Request Handling Scores 9.8 | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-23427 | Critical Linux Kernel ksmbd Use-After-Free in Durable Handle Replay Scores 9.8 | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-23415 | Linux Kernel Futex Use-After-Free between Key Lookup and VMA Policy Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23413 | Linux Kernel clsact Use-After-Free in Init/Destroy Rollback Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23412 | Linux Kernel Netfilter BPF Use-After-Free in Hook Memory Release Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23411 | Linux Kernel AppArmor Race Condition Frees i_private Data Early Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23410 | Linux Kernel AppArmor Race on Rawdata Dereference Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23408 | Linux Kernel AppArmor Double Free of Namespace Name Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23407 | Linux Kernel AppArmor Out-of-Bounds Read in DFA Verification Scores 7.8 | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-23406 | Linux kernel AppArmor match_char macro evaluates pointer multiple times and skips input characters during DFA traversal | 7.8 High | Updated |
| 2026-06-17 | CVE-2026-1952 | Delta Electronics AS320T Denial of Service via Undocumented Subfunction Call, Exploitable Remotely Without Authentication | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1951 | Delta Electronics AS320T Stack-Based Buffer Overflow Due to Missing Directory Name Length Check, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1950 | Delta Electronics AS320T Stack-Based Buffer Overflow Due to Missing File Name Length Check, Enabling Unauthenticated Remote Code Execution | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-1949 | Delta Electronics AS320T GET/PUT Request Handler Incorrectly Calculates Stack Buffer Size, Enabling Unauthenticated Remote Code Execution via the Web Service | 9.8 Critical | Updated |
| 2026-06-17 | CVE-2026-11317 | Rockwell Automation CompactLogix and ControlLogix Crafted CIP Message Fault Causes Denial of Service Requiring Device Restart | 8.7 High | Updated |
| 2026-06-17 | CVE-2026-10829 | Moxa NPort W2150A-W4/W2250A-W4 Series Stack-Based Buffer Overflow from Insufficient Input Validation Allows Unauthenticated Remote Exploitation | 8.6 High | Updated |
| 2026-06-17 | CVE-2026-10825 | Moxa NPort 6000-G2 Series WebSocket API JSON Request Handling Flaw Allows Low-Privilege Authenticated Attacker to Cause Denial of Service | 7.1 High | Updated |
| 2026-06-17 | CVE-2026-0647 | Rockwell Automation FLEX I/O 1794-AENTR Adapter Web Server Missing Authentication Allows Unauthenticated Attacker to Change Web Interface Password | 8.8 High | Updated |
| 2026-06-17 | CVE-2026-0646 | Rockwell Automation FLEX I/O 1794-AENTR Adapter Improper CIP Protocol Memory Handling Causes Adapter Fault and Communication Loss | 8.7 High | Updated |
| 2026-06-17 | CVE-2025-41670 | Phoenix Contact AXC F PLC Runtime User-Writable Configuration Files Allow Low-Privilege Local User to Influence Privileged Service Behavior | 7.8 High | Updated |
| 2026-06-17 | CVE-2025-41669 | Phoenix Contact AXC F PLC PLCnext Store App Installation Lacks Data Verification, Allowing Low-Privilege Remote Engineer to Install Unsigned Applications | 8.8 High | Updated |
| 2026-06-17 | CVE-2025-40946 | Siemens blueplanet Solar Inverter Hard-Coded Credentials Allow Adjacent Unauthenticated Attacker to Compromise Device | 8.3 High | Updated |
| 2026-06-17 | CVE-2025-40899 | Nozomi Networks Guardian Stored Cross-Site Scripting in Assets/Nodes Custom Fields Allows Low-Privilege Authenticated Attacker to Execute Scripts | 8.9 High | Updated |
| 2026-06-17 | CVE-2025-40897 | Nozomi Networks Guardian Threat Intelligence Access Control Flaw Lets View-Only Authenticated Users Modify Records | 8.1 High | Updated |
| 2026-06-17 | CVE-2024-43384 | Phoenix Contact mGuard Firewall Improper Removal of Sensitive Information Before Storage Exposes Root Password to Low-Privilege Remote User | 8.0 High | Updated |
| 2026-06-17 | CVE-2024-1490 | WAGO PLC OpenVPN Configuration via Web Management Allows Authenticated High-Privilege Attacker to Execute Arbitrary Code | 7.2 High | Updated |
| 2026-06-17 | CVE-2023-3634 | Festo MSE6 Undocumented Test Mode Functions Exploitable by Authenticated Low-Privilege Remote Attacker for Full Data Loss | 8.8 High | Updated |