Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

OT, ICS & IoT Siemens SIMATIC S7-1500 TM MFPView CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available. The following versions of Siemens… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens Industrial Edge DevicesView CSAF Summary Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFPView CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for products where fixes are… CISA Cybersecurity Advisories · United States · 22 Oct 2026
AI security Managing AI Token Consumption for Operational ResilienceCISA, the Canadian Centre for Cyber Security (Cyber Centre), and partners are releasing joint guidance, Managing AI Token Consumption for Operational Resilience, to help organizations understand and manage token usage in support of operations. As organizations adopt third-party super intelligence… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens Capital Embedded AR ClassicView CSAF Summary The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens RUGGEDCOM APE1808 DevicesView CSAF Summary Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information. The… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens RUGGEDCOM CROSSBOWView CSAF Summary RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens SIMATIC S7 PLCs Web ServerView CSAF Summary SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is preparing fixes and… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens Industrial Edge Device KitView CSAF Summary Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens APOGEE, TALON and Desigo PXC/PXM ProductsView CSAF Summary The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens SENTRON 3NA COM FuseView CSAF Summary SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore… CISA Cybersecurity Advisories · United States · 22 Oct 2026
Hardware & firmware Kiloview E3 NDI EncoderView CSAF Summary Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device. The following versions of Kiloview E3 NDI Encoder are affected: E3 Firmware <1.30 (CVE-2026-109122, CVE-2026-111100, CVE-2026-96616, CVE-2026-105265, CVE-2026-110491,… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens SIMATIC IPCsView CSAF Summary The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens Software CenterView CSAF Summary The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens RUGGEDCOM CROSSBOW Station Access ControllerView CSAF Summary RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for… CISA Cybersecurity Advisories · United States · 22 Oct 2026
OT, ICS & IoT Siemens WinCCView CSAF Summary Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and… CISA Cybersecurity Advisories · United States · 22 Oct 2026
Threats, ransomware & breaches InterSystems Corporation InterSystems IRIS for HealthView CSAF Summary Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device. The following versions of InterSystems Corporation InterSystems IRIS for Health are affected: InterSystems IRIS for Health 2026.2.0.221,… CISA Cybersecurity Advisories · United States · 22 Oct 2026
Vulnerabilities & exploits 2026-019: Critical Vulnerability in GitLab Community and Enterprise EditionsOn 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU recommends organisations to update affected assets as soon as possible,… CERT-EU Security Advisories · European Union · 22 Oct 2026
Threats, ransomware & breaches USN-8890-2: libsoup vulnerabilitiesUSN-8890-1 fixed vulnerabilities in libsoup. This update provides the corresponding updates for libsoup3 on Ubuntu 26.10. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of… Ubuntu Security Notices · Global · 21 Oct 2026
Threats, ransomware & breaches USN-8951-1: c-ares vulnerabilitiesIt was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-22217) It was discovered that c-ares… Ubuntu Security Notices · Global · 21 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.