CVEs
Browse the synced catalog, newest first.
- CVE-2026-109097A vulnerability has been identified in ROS# (All versions < V2.3.1).Siemens ROS#
- CVE-2026-59082A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All…Siemens SIMATIC WinCC
- CVE-2026-58114A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC…Siemens SIMATIC BATCH · Siemens SIMATIC Information Serv… +4
- CVE-2026-12574Server-Side HTML InjectionZohocorp DDI Central
- CVE-2026-125709Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.Red Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-125707Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset tableRed Hat Enterprise Linux
- CVE-2026-125706Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsingRed Hat Enterprise Linux
- CVE-2026-125712Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsingRed Hat Enterprise Linux
- CVE-2026-12573Authenticated Command InjectionZohocorp DDI Central
- CVE-2026-125715Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or…Samsung Opensource mTower
- CVE-2026-123717[Eclipse CSI - otterdog] OS Command Injection and Arbitrary Code ExecutionEclipse CSI otterdog
- CVE-2026-12572SQL InjectionZohocorp DDI Central
- CVE-2026-95651Authentication BypassZohocorp DDI Central
- CVE-2026-95646Authenticated Command InjectionZohocorp DDI Central
- CVE-2026-119446Session fixation in the CLI login flow allows an unauthenticated attacker to obtain a user's API tokennerves-hub nerves_hub_web
- CVE-2026-120286Missing authorization in device and deployment group page events allows view-role members to change devices and deployment groupsnerves-hub nerves_hub_web
- CVE-2026-120997Improper session invalidation keeps removed or demoted members' open pages and device consoles working at their old rolenerves-hub nerves_hub_web
- CVE-2026-120730Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmwarenerves-hub nerves_hub_web
- CVE-2026-125703Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handlingRed Hat Enterprise Linux
- CVE-2026-125672Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an optionRed Hat Enterprise Linux
- CVE-2026-120999Improper authentication lets Google sign-in and confirmation links sign users in to accounts registered with their email address by…nerves-hub nerves_hub_web
- CVE-2026-120295Incorrect authorization in the devices page bulk move allows view-role members to move devices into another organization and receive its…nerves-hub nerves_hub_web
- CVE-2026-125704Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserializationRed Hat Enterprise Linux
- CVE-2026-124503sooperset mcp-atlassian io.py validate_safe_path path traversalsooperset mcp-atlassian
- CVE-2026-104619PackageKit ZYpp rollback vulnerabilityPackageKit
- CVE-2026-60046DoS via password resetMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60045Arbitrary file uploadMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60044Static backup passwordMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60043XSS in backendMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60042Authentication bypass in com_checkMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2