⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Johnson Controls Airwall versions up to 4.0.4 are impacted by a hardcoded cryptographic key (CVE-2026-64887) and an external file control vulnerability (CVE-2026-34492). Exploitation can lead to decryption of sensitive data, authentication bypass, and unauthorized file access.
Siveillance Video Management Servers contain a critical OS command injection vulnerability (CVE-2026-3014) enabling remote code execution. Affected versions include V2023 R3 before 23.3.27, V2024 R1 before 24.1.16, and V2025 before 25.1.15.
Siemens Parasolid versions V38.0 before 38.0.235 and V38.1 before 38.1.230 contain an out-of-bounds read vulnerability (CVE-2026-64629) triggered by malicious X_T files. Successful exploitation could allow arbitrary code execution or application crash.
Simcenter Femap has two out-of-bounds read vulnerabilities triggered when reading specially crafted BMP files. Successful exploitation can crash the application or execute arbitrary code in the current process.
Siemens LOGO! Soft Comfort before V9 uses a hardcoded AES master key (CVE-2026-57262) and unsalted password hashes (CVE-2026-57263), allowing local attackers to decrypt project data or brute-force passwords. A hardware upgrade to LOGO! V9 BM or later is also required to fully resolve the vulnerabilities.
Hitachi Energy APM Edge 6.10 and earlier is affected by Dirty Frag vulnerabilities in the Linux kernel IPsec ESP subsystem. Locally authenticated users can exploit kernel memory handling flaws to gain root privileges and compromise the device.