KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO...
Ruggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
SIMATIC S7 PLCs contain multiple vulnerabilities in the web server that could allow an attacker to perform cross-site scripting attacks. Siemens has released new versions for several affected...
The web server in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 contains a request smuggling vulnerability in the Go Project’s net/http package that could allow an attacker to retrieve...
The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which could allow an...
Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the...
Simcenter Femap is affected by heap based buffer overflow vulnerability in Datakit library that could be triggered when the application reads files in IPT format. If a user is tricked to open a...
Siemens gPROMS Web Applications Publisher (gWAP) is affected by a remote code execution vulnerability introduced through a third-party component, namely the Axios HTTP client library. The...
Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an...
A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary...
Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remote attacker to read arbitrary files with root privileges from the underlying operating...
IBM security advisory (AV26-438)
Dell security advisory (AV26-439)
Ubuntu security advisory (AV26-440)
[Control systems] CISA ICS security advisories (AV26–441)
Red Hat security advisory (AV26-442)
Spring security advisory (AV26-443)
Broadcom VMware security advisory (AV26-444)
JetBrains security advisory (AV26-445)
Apple security advisory (AV26-446)
SAP security advisory – May 2026 monthly rollup (AV26-447)
[Control systems] Siemens security advisory (AV26-448)
[Control systems] Schneider Electric security advisory (AV26-449)
Ivanti security advisory (AV26-450)
Mozilla security advisory (AV26-451)
Adobe security advisory (AV26-452)
Intel security advisory (AV26-453)
Fortinet security advisory (AV26-454)
AMD security advisory (AV26-455)
Microsoft security advisory – May 2026 monthly rollup (AV26-456)