Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Aggiornamenti di sicurezza sanano molteplici vulnerabilità di sicurezza, di cui 5 con gravità “alta”, in Firefox, Firefox ESR e Thunderbird.
EPSS 0.00 CVE-2026-113399 CVE-2026-113470 CVE-2026-113866 CVE-2026-113867 CVE-2026-113868 Mozilla IT
Serial number: AV26-1081 Date: October 23, 2026 As of October 21, 2026, Fortinet is affected by vulnerabilities in the following products: FortiAnalyzer 8.0 Versions prior to 8.0.2 FortiAnalyzer 7.6 Versions prior to 7.6.8 FortiAnalyzer 7.4 Versions prior to 7.4.12 FortiAnalyzer 7.2 Versions prior to 7.2.13 FortiAuthenticator 8.0 Versions prior to 8.0.4 FortiAuthenticator 6.6 Versions prior to 6.6.11 FortiMail 8.0 Versions prior to 8.0.2 FortiMail 7.6 Versions prior to 7.6.7 FortiMail 7.4…
Fortinet CA
Serial number: AV26-1079 Date: October 22, 2026 As of October 22, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following product: HPE Networking Wireless Operating Systems - AOS Versions prior to 10.8.1.2 Versions prior to 10.7.2.7 Versions prior to 10.4.1.14 Versions prior to 8.13.3.1 Versions prior to 8.10.0.24 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.…
HPE CA
Serial number: AV26-1078 Date: October 22, 2026 As of October 22, 2026, MongoDB is affected by vulnerabilities in the following product: C# Driver Prior to 3.13.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization Authentication bypass via issuer-and-serial-only certificate equality in shared cluster…
MongoDB CA
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. [...]
CVE-2026-79844 * CVE-2026-79845 * CVE-2026-79846 * CVE-2026-79847 * CVE-2026-79848 * CVE-2026-79849 * CVE-2026-79850 * CVE-2026-79851 * Hewlett Packard Enterprise US
I veckans brev kan du läsa om de två kritiska sårbarheterna i programmeringsspråket PHP, som används av en mängd webbplatser över hela världen. Du hittar även en rapport från bland annat CISA om utpressningsaktören Safepay.
PHP SE
DESCRIERE În data de 21.10.2026, GitLab a publicat actualizările de securitate 19.5.1, 19.4....
GitLab RO
Disponibili Proof of Concept per diverse vulnerabilità, già sanate dal vendor, presenti nella componente C# Driver di MongoDB. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malevolo di accedere a informazioni sensibili, manipolare i dati, compromettere la disponibilità del servizio o impersonare entità legittime sui sistemi interessati.
EPSS 0.00 CVE-2026-114643 CVE-2026-114644 CVE-2026-114646 CVE-2026-114647 CVE-2026-114648 CVE-2026-114649 CVE-2026-114650 CVE-2026-114651 CVE-2026-114652 CVE-2026-114653 CVE-2026-114654 MongoDB IT
Google heeft een kwetsbaarheid verholpen in de Brotli-decompressiebibliotheek. Deze bibliotheek wordt onder meer gebruikt in Node.js. Een ongeauthenticeerde kwaadwillende kan de kwetsbaarheid op afstand misbruiken door speciaal vervaardigde Brotli-gecomprimeerde gegevens te laten verwerken. Succesvol misbruik kan leiden tot een denial-of-service, toegang tot gevoelige gegevens uit het procesgeheugen of het uitvoeren van willekeurige code met de rechten van het getroffen proces.
ASUS ha rilasciato aggiornamenti di sicurezza per sanare 3 vulnerabilità con gravità "alta", che interessano il firmware di diversi modelli di router. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un attaccante remoto non autenticato di eludere i meccanismi di autenticazione, di elevare i propri privilegi e di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.01 CVE-2026-75775 CVE-2026-75779 CVE-2026-93489 ASUS IT
CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and CVE-2025-58403) found in CGM CLININET software.
EPSS 0.01 CVE-2025-30043 CVE-2025-30045 CVE-2025-30047 CVE-2025-30049 CVE-2025-30054 CVE-2025-58403 CGM zdravotnictví PL
È stata resa pubblica la compromissione delle chiavi private associate ai certificati di otto autorità di certificazione (CA) intermedie di eMudhra , sei destinate all'emissione di certificati TLS e due alla firma del codice. Risultano interessate anche le corrispondenti versioni dei certificati intermedi oggetto di certificazione incrociata (cross-signing) da parte di Sectigo.
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 4.9, CVEs: CVE-2026-114570, Summary: WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a higher privileged user accesses the…
EPSS 0.00 CVSS 4.9 CVE-2026-114570 WordPress FI
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.9, CVEs: CVE-2026-96293, Summary: A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.
EPSS 0.00 CVSS 6.9 CVE-2026-96293 WatchGuard FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.3, CVEs: CVE-2026-115253, Summary: An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows an attacker to tamper with or destroy the agent's security logs and stage further local attacks by placing…
EPSS 0.00 CVSS 7.3 CVE-2026-115253 WatchGuard FI IT
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2023-52927, CVE-2023-53292, CVE-2023-54271, CVE-2024-26982, CVE-2024-36922, CVE-2024-40945, CVE-2024-47809, CVE-2024-49998, CVE-2024-53166, CVE-2024-56647, CVE-2024-56657, CVE-2024-56719, CVE-2024-57977, CVE-2024-57979, CVE-2024-57980, CVE-2024-57981, CVE-2024-57986, CVE-2024-57993, CVE-2024-57996, CVE-2024-58002 (+357 other associated CVEs), Summary: CISA released 20 Industrial Control…
CVSS 10.0 Siemens InterSystems Corporation Kiloview Meari FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-105483, CVE-2026-106069, CVE-2026-111497, CVE-2026-105481, CVE-2026-106072, CVE-2026-106074, CVE-2026-106070, CVE-2026-106071, CVE-2026-106073, Summary: This security release includes the following dependency updates to address public vulnerabilities: c-ares on 26.x, 24.x, 22.x ca-cert (eMudhra Intermediate CA Compromise) on 26.x, 24.x, 22.x OpenSSL on 24.x, 22.x SQLite on 22.x Undici…
KEV ✓ EPSS 0.83 CVE-2026-105481 CVE-2026-105483 CVE-2026-106069 CVE-2026-106070 CVE-2026-106071 CVE-2026-106072 CVE-2026-106073 CVE-2026-106074 CVE-2026-111497 Node.js FI
De multiples vulnérabilités ont été découvertes dans les produits Papercut. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
EPSS 0.01 CVE-2026-11744 CVE-2026-14780 CVE-2026-82077 CVE-2026-87739 PaperCut FR
CISA added CVE-2026-110447 to the Known Exploited Vulnerabilities catalog. Affected product: Collabora Collabora Online – Built-in CODE Server. Remediation due date: 2026-10-26.
KEV ✓ EPSS 0.73 CVE-2026-110447 Collabora Nextcloud Collabora Online - Built-in CODE Server US IT FI
When we are building detections for various threats, we regularly run the exploits on representative systems to help us build high-quality rules. The Common Vulnerabilities and Exposures (CVE) entry CVE-2026-73570 for Zimbra is no exception. Zimbra is a widely used enterprise email and collaboration software platform, known for its SMTP platform, among other services. SMTP plays a critical role in the infrastructure of many organizations by providing email services that often include either…
KEV ✓ EPSS 0.72 CVE-2026-73570 Zimbra Synacor veřejná správa US IT HU
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
IBM FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.
De multiples vulnérabilités ont été découvertes dans les produits Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer un contournement de la politique de sécurité, un déni de service et un problème de sécurité non spécifié par l'éditeur.
Red Hat FR
De multiples vulnérabilités ont été découvertes dans les produits SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
SUSE FR
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Microsoft FR
De multiples vulnérabilités ont été découvertes dans les produits HPE Aruba Networking. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
HPE FR
Une vulnérabilité a été découverte dans Mattermost Server. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Mattermost FR
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]
Railway US
Serial number: AV26-1077 Date: October 22, 2026 As of October 21, 2026, Splunk is affected by vulnerabilities in the following products: Splunk Enterprise Prior to 10.0.11 Prior to 10.2.8 Prior to 10.4.4 Prior to 9.4.16 Splunk SOAR Prior to 8.7.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Hardening in Splunk Enterprise - October 2026 Security Vulnerabilities in Splunk SOAR - October…
Splunk CA
Welcome to this week’s edition of the Threat Source newsletter. Here for the latest on the PHP vulnerabilities? Head on down to ‘The One Big Thing’. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset. But if you want a bit of levity, here’s what I wrote before everything kicked off yesterday: Ever feel like the world is moving too fast to keep up? Well, I bring you scientific proof that it’s not just you.…
PHP US
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
CVE-2026-114625 * CVE-2026-16812 * CVE-2026-7473 * CVE-2026-93952 * Arista Networks US
Serial number: AV26-1076 Date: October 22, 2026 As of October 20, 2026, Atlassian is affected by vulnerabilities in the following products: Bamboo Data Center and Server Version 12.1.12 and prior Version 10.2.24 and prior Bitbucket Data Center and Server Version 10.2.8 and prior Version 10.5.1 and prior Version 9.4.26 and prior Confluence Data Center and Server Version 11.0.0 and prior Version 10.2.19 and prior Version 9.2.26 and prior Crowd Data Center and Server Version 7.2.4 and prior…
Atlassian CA
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-110063 US
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83938 US
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96185 Microsoft US
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-97785 US
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-108456 US
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105014 US
Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.
EPSS 0.00 CVE-2026-16477 MTW PL
Gitlab har publicerat säkerhetsuppdateringar för en ny sårbarhet, CVE-2026-110264. Sårbarheten har fått en CVSS-klassning på 10.0 och kan utnyttjas av en oautentiserad användare för att köra godtycklig kod. [1][2] GitLab har rättat sårbarheterna i följande versioner av GitLab Community Edition (CE) och Enterprise Edition (EE): 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13.
EPSS 0.01 CVE-2026-110264 GitLab SE
De FreeBSD community heeft meerdere kwetsbaarheden verholpen in bhyve Hypervisor De kwetsbaarheden betreffen race conditions, onjuiste validatie en synchronisatieproblemen in verschillende device modellen binnen de bhyve hypervisor. Een kwaadwillende gast-virtuele machine kan deze fouten misbruiken om een denial of service te veroorzaken door het bhyve proces te laten crashen of om arbitraire code uit te voeren in de host userspace. Dit kan plaatsvinden via manipulatie van event ring size en…
FreeBSD NL
Serial Number: AV26-1075 Date: October 22, 2026 As of October 19, 2026, Roundcube is affected by vulnerabilities in the following product: Roundcube Webmail Prior to 1.6.20 Prior to 1.7.5 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security updates 1.6.20 and 1.7.5 released Roundcube Open Source Webmail Software
Roundcube CA
Serial Number: AV26-1074 Date: October 22, 2026 As of October 21, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Community Edition (CE) and Enterprise Edition (EE) Prior to 18.11.13 Prior to 19.0.10 Prior to 19.1.9 Prior to 19.2.9 Prior to 19.3.6 Prior to 19.4.3 Prior to 19.5.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.5.1, 19.4.3,…
GitLab CA
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Expressway Series. De kwetsbaarheden betreffen onder andere onvoldoende autorisatiecontroles tijdens Mobile en Remote Access provisioning, waardoor ongeauthenticeerde externe aanvallers toegang kunnen krijgen tot gevoelige informatie. Daarnaast is er een kwetsbaarheid in de databaseservice die het mogelijk maakt voor ongeauthenticeerde aanvallers met netwerktoegang om root-commando's uit te voeren via onvoldoende validatie van…
Cisco NL
Cisco heeft meerdere kwetsbaarheden verholpen in Snort 3, het open source intrusion detection en prevention systeem dat in diverse Cisco-producten wordt gebruikt. De kwetsbaarheden bevinden zich in verschillende componenten van de Snort 3 Detection Engine, waaronder de SMTP MIME Decoder, NetFlow Detection Engine, GRE Detection Engine, Teredo Detection Engine, VBA Decompression Engine, en de memory management. Ongeauthenticeerde remote aanvallers kunnen speciaal vervaardigde pakketten of…
Cisco NL
Oracle heeft meerdere kwetsbaarheden verholpen in Oracle Java. In Oracle Java SE, JavaFX en GraalVM Enterprise Edition zijn diverse kwetsbaarheden aanwezig die door ongeauthenticeerde netwerkaanvallers kunnen worden misbruikt via blootgestelde API's of sandboxed Java-applicaties. Deze kwetsbaarheden maken het mogelijk om denial of service te veroorzaken, ongeautoriseerde lees- en schrijfacties op data uit te voeren, en in sommige gevallen beperkte data toegang te verkrijgen. Exploitatie kan…
Oracle NL
View CSAF Summary Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device. The following versions of Kiloview E3 NDI Encoder are affected: E3 Firmware <1.30 (CVE-2026-109122, CVE-2026-111100, CVE-2026-96616, CVE-2026-105265, CVE-2026-110491, CVE-2026-107861, CVE-2026-110243, CVE-2026-92450, CVE-2026-110825) CVSS Vendor Equipment v3 9.9 Kiloview E3 Firmware 6 Vulnerabilities Improper Neutralization of Special Elements used in an OS Command (…
EPSS 0.01 CVE-2026-105265 CVE-2026-107861 CVE-2026-109122 CVE-2026-110243 CVE-2026-110491 CVE-2026-110825 CVE-2026-111100 CVE-2026-92450 CVE-2026-96616 Kiloview telekomunikace US
View CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available. The following versions of Siemens SIMATIC S7-1500 TM MFP are affected: SIMATIC S7-1500 TM MFP - GNU/Linux subsystem vers:all/* CVSS Vendor Equipment v3 10 Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 377 Vulnerabilities Access of…
Siemens výroba a průmysl doprava energetika zdravotnictví US
View CSAF Summary SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation. The following versions of Siemens SENTRON 3NA COM Fuse are affected: SENTRON 3NA COM Fuse vers:intdot/<5.2 (CVE-2024-7322) CVSS Vendor Equipment v3 5.8 Siemens SENTRON 3NA COM Fuse 1…
EPSS 0.00 CVE-2024-7322 Siemens výroba a průmysl doprava energetika zdravotnictví US
View CSAF Summary SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available. The following versions of Siemens SIMATIC S7 PLCs Web Server are affected: SIMATIC Drive Controller CPU 1504D TF …
EPSS 0.00 CVE-2026-63350 CVE-2026-63351 CVE-2026-63352 CVE-2026-63353 CVE-2026-63354 CVE-2026-63355 CVE-2026-63356 CVE-2026-63357 Siemens US
View CSAF Summary Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. The following versions of Siemens Industrial Edge Devices are…
EPSS 0.00 CVE-2026-44414 CVE-2026-44415 Siemens výroba a průmysl doprava energetika zdravotnictví US
View CSAF Summary The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens SIMATIC IPCs are affected: SIMATIC IPC BX-21A vers:intdot/<31.01.13 (CVE-2026-72895) SIMATIC IPC RW-543A vers…
EPSS 0.00 CVE-2026-72895 Siemens výroba a průmysl doprava energetika zdravotnictví US
View CSAF Summary RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version. The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected: RUGGEDCOM…
EPSS 0.73 CVE-2025-6965 CVE-2025-70873 CVE-2025-71316 CVE-2026-11822 CVE-2026-11824 Siemens výroba a průmysl doprava energetika zdravotnictví US
View CSAF Summary The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about…
KEV ✓ EPSS 0.01 CVSS 8.4 CVE-2026-110936 Siemens výroba a průmysl doprava energetika zdravotnictví US FI CA IT
View CSAF Summary PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable. The following versions of Siemens PSS(R)SINCAL…
EPSS 0.00 CVE-2026-84854 Siemens WIBU Systems energetika doprava výroba a průmysl zdravotnictví US
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device. The following versions of InterSystems Corporation InterSystems IRIS for Health are affected: InterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594) CVSS Vendor Equipment v3 8.1 InterSystems Corporation InterSystems IRIS for Health 1 Vulnerability Cleartext Transmission of…
EPSS 0.00 CVE-2026-111594 InterSystems zdravotnictví US
View CSAF Summary The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens Capital Embedded…
EPSS 0.00 CVE-2026-89208 Siemens výroba a průmysl doprava energetika zdravotnictví US
View CSAF Summary Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available. The following versions of Siemens WinCC…
EPSS 0.00 CVE-2026-59241 Siemens výroba a průmysl doprava energetika zdravotnictví US