csaf_ncscnlcritical · 10.0
ncsc-2026-0454
HPE has fixed 72 vulnerabilities, 33 rated critical, in HPE Networking AOS-8 and AOS-10, which include Mobility Conductors, Mobility Controllers, Mobility Gateways and Access Points. Unauthenticated remote or adjacent-network attackers could exploit issues such as authentication bypass, command and SQL injection, and buffer overflows to run arbitrary code, gain administrative access, change configurations, read sensitive data or cause denial of service, and eight of the critical flaws score CVSS 10.0. This could be relevant where HPE Networking AOS is deployed in automotive systems, but the advisory does not confirm any automotive deployment; confirm applicability through the product SBOM or dependency inventory.
csaf_sickcritical · 10.0
sca-2026-0016
SICK CorivaHub contains third-party components Apache Tomcat and MapLibre GL that are affected by two known vulnerabilities, one involving improper input validation in Apache Tomcat and one in MapLibre GL that could allow malicious behavior through custom GUIs. Under certain conditions, successful exploitation could affect the confidentiality, integrity and availability of the affected system, though the attack surface for the Apache Tomcat issue is significantly reduced by the default product configuration. SICK recommends updating to CorivaHub 2026.1.2 to remediate both vulnerabilities.
csaf_siemenscritical · 10.0
ssa-457936
The advisory covers multiple vulnerabilities in the additional GNU/Linux subsystem of firmware V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP, including its SIPLUS variant, spanning OpenSSH and Linux kernel issues. An attacker could exploit these flaws to escalate privileges, cause crashes or denial of service, or in some cases disclose sensitive information, depending on the specific vulnerability. Siemens is preparing fixes and recommends mitigations where fixes are not yet available, and the advisory does not state a single overall severity rating.
csaf_siemenscritical · 10.0
ssa-784472
Siemens has identified multiple vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1, an industrial controller module. An attacker could potentially exploit these flaws to cause crashes or other disruptions, though Siemens has not yet released fixes and instead recommends specific mitigations. Siemens advises protecting network access to affected devices and operating them in a protected IT environment.
csaf_ncscnlcritical · 10.0
ncsc-2026-0282
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Siemens products like SIMATIC, RUGGEDCOM, and Solid Edge used in production environments. An attacker with access to the production network could exploit these flaws to execute malicious code with admin rights, manipulate data, bypass security controls, or cause system outages, with the highest risk being remote code execution that could disrupt vehicle manufacturing operations. Siemens has released security updates and mitigation measures, and while the attack requires access to the production environment, the potential for high damage makes patching a priority.
csaf_siemenscritical · 10.0
ssa-834709
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically the SIMATIC IoT2050 Advanced edge device running Node-RED. An unauthenticated remote attacker could exploit the missing authentication on the Node-RED HTTP interface to create malicious flows and execute arbitrary code with maximum privileges on the underlying server. Siemens has released a software update to fix this critical issue, and immediate patching is strongly recommended to prevent potential disruption or sabotage of manufacturing operations.
nvdcritical · 10.0
cve-2026-8984
This vulnerability affects EV charging infrastructure including wallboxes, DC fast chargers, and charging station management systems. An unauthenticated attacker on the network can send a crafted request to TCP port 9002 on the Autel MaxiCharger Single, causing the device to download and execute malicious files with full root privileges. This is a critical severity issue that could allow an attacker to fully compromise the charger, potentially disrupting charging operations or using the device as a foothold for broader network attacks.
fkie_nvdcritical · 10.0
cve-2026-8982
This vulnerability affects EV charging infrastructure including wallboxes, DC fast chargers, and charging station management systems. Two hidden privileged accounts in Autel Maxi Charger Single firmware allow an attacker who knows the password derivation algorithm to log into the web management interface with full administrative rights. This is a critical security flaw that could let an attacker control charging operations, access sensitive data, or disrupt service.
fkie_nvdcritical · 10.0
cve-2026-8983
This vulnerability affects EV charging infrastructure including wallboxes, DC fast chargers, and charging station management systems. An attacker can exploit a hard-coded authentication token in Autel Maxi Charger Single firmware to bypass authorization checks and access privileged management functions without valid credentials. This is a critical security flaw that could allow unauthorized control over charging operations and potentially compromise the safety and reliability of the charging network.
nvdcritical · 10.0
cve-2026-8985
This vulnerability affects EV charging infrastructure including wallboxes, DC fast chargers, and charging station management systems. An unauthenticated attacker can exploit a command injection flaw in the Autel MaxiCharger Single firmware to execute arbitrary operating system commands on the charger by sending crafted input to a test endpoint on TCP port 9002. This is a critical severity issue that could allow an attacker to take full control of the charging station, potentially disrupting charging operations or using the device as a foothold for broader network attacks.
csaf_siemenscritical · 10.0
ssa-096828
This vulnerability affects the Opcenter X industrial software platform, which is used in automotive manufacturing plants for production management and quality control. An unauthenticated remote attacker could forge authentication tokens to gain full administrative access to the application, potentially disrupting vehicle production lines or stealing manufacturing data. Siemens has released a fix in version V2604, and immediate updating is strongly recommended.
csaf_ncscnlcritical · 10.0
ncsc-2026-0229
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Siemens products like CADRA, IAM, Mendix, OpCenter, RUGGEDCOM, SIDIS, and SIMATIC. An attacker with access to the production environment could exploit these flaws to execute remote code, manipulate data, bypass security measures, or cause a denial-of-service, with the overall risk rated as medium likelihood and high potential damage. Siemens has released security updates and mitigations to address these issues.
csaf_ncscnlcritical · 9.9
ncsc-2026-0423
Microsoft has fixed 1,159 vulnerabilities in Windows, including 53 rated CVSS 9.0 or higher, which could let an attacker impersonate other users, gain elevated privileges, or run arbitrary code; some of these can be exploited remotely without authentication or user interaction, and systems exposed to public networks are at higher risk. The advisory does not confirm any automotive deployment, but Windows is widely used in embedded and automotive-adjacent systems, so this could be relevant where Windows-based components are deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5critical · 9.9
cve-2026-65093
NVIDIA OpenShell for Linux contains a vulnerability that could allow an attacker to escape its sandbox, potentially leading to code execution, privilege escalation, data tampering, and information disclosure. This could be relevant where NVIDIA OpenShell is deployed in automotive systems, though the advisory does not confirm such use. Confirm applicability through the product SBOM or dependency inventory.
csaf_sickcritical · 9.8
sca-2026-0017
SICK reports that multiple of its products are affected by a buffer overflow in the Google Brotli decoder (versions 1.0.3 through 1.2.0), which a remote unauthenticated attacker could exploit with a crafted compressed stream to corrupt memory, disclose sensitive data, cause a denial of service, or potentially execute arbitrary code. Successful exploitation could impact the confidentiality, integrity and availability of affected systems, and SICK is not aware of any active exploitation targeting its products at publication. SICK recommends updating to a fixed Brotli version (1.0.10, 1.1.1 or 1.2.1) and reducing network exposure of the devices.
csaf_abbcritical · 9.8
4tlb000837
ABB reports that third-party PHP and NTFS-3G components in affected IPEC Standalone iSM product versions mishandle memory requests, and an attacker who successfully exploits them could insert and run arbitrary code on the affected system node. The PHP flaws can be exploited remotely by an attacker with network access sending a specially crafted request, while the NTFS-3G flaws require the system to process a maliciously crafted NTFS filesystem image, such as from an untrusted storage device. The advisory states no active exploitation had been reported to ABB at the time of writing and does not assign a numeric severity rating.
fkie_nvdcritical · 9.8
fkie_cve-2026-112354
Etrel INCH AC charging station management web interfaces running firmware older than 7.1.2 or 8.0.1 contain hard-coded default credentials, so a remote attacker can log in with the factory-default account and gain full Administrator access over cleartext HTTP. This exposes the charger configuration, the OCPP ChargePoint Identity, and the CSMS WebSocket connection details, giving unauthorized administrative control of the charging station. The advisory does not state a severity rating.
csaf_festosecokgcritical · 9.8
fsa-202603
Festo Didactic FactoryViews and MES4 deployments that bundle XAMPP include a vulnerable PHP version affected by two critical flaws, CVE-2026-109618 and CVE-2026-109619, which allow an attacker to remotely execute code on the FactoryViews or XAMPP host system with the privileges of the server application's user account. Successful exploitation can compromise the confidentiality, integrity and availability of the affected system. Festo rates these as critical and recommends updating FactoryViews 1.12.1 and earlier to 1.13.0, while no fix is available for MES4 with XAMPP, so users should apply the stated PHP configuration mitigations and restrict network access to the host.
csaf_wagogmbhcokgcritical · 9.8
vde-2026-132
WAGO controllers running an affected PHP version with the integrated web server enabled are exposed to critical vulnerabilities in the PHP runtime. A remote attacker could exploit weaknesses in PHP's memory and request handling through specially crafted web requests to execute arbitrary code, potentially gaining control of the affected PHP process via the web interface and causing unauthorized access, data manipulation, or disruption of device functionality. WAGO rates these vulnerabilities as critical and recommends updating to Firmware Version 4.10.4 (FW32) or later, installing the IPK security patch for FW31, or disabling the device's web server until a fix is applied.
csaf_ncscnlcritical · 9.8
ncsc-2026-0461
The advisory describes two fixed Linux kernel vulnerabilities: a race condition in the IPv4 TCP stack causing a use-after-free of socket options during concurrent TCP SYN retransmissions or request socket migrations, which can lead to system instability or memory corruption, and a checksum metadata validation flaw in the IPv4 networking subsystem (PwnEscape) that lets local attackers or untrusted guest virtual machines run arbitrary code on the host, crash the system, or leak sensitive information. The stated severity is medium likelihood and high damage. This could be relevant where the Linux kernel is deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
csaf_abbcritical · 9.8
2nga003224
ABB reports that flaws in the PHP component of the listed affected product versions, collectively called PHP2Shell, could let an attacker with network access to an affected system node take control of that node or insert and run arbitrary code, and ABB notes functional safety could be affected if a compromised system performs safety-related functions. The advisory does not state a numeric severity score, but it describes the issue as critical and notes the vulnerabilities have been publicly disclosed, with no reports of exploitation at the time of issue. This could be relevant where ABB products using PHP are deployed in automotive manufacturing or industrial systems; confirm applicability through the product SBOM or dependency inventory.
csaf_abbcritical · 9.8
2nga003256
ABB Netcontrol 100, 200, 500 and NAM are affected by publicly disclosed PHP memory-management flaws known as PHP2Shell. An attacker with network access to an affected system node could take control of that node or insert and run arbitrary code, and ABB notes that functional safety could be affected if a compromised system performs safety-related functions or influences safety-critical processes. The advisory does not state a numeric severity rating, and ABB had no reports of exploitation when it was issued.
csaf_siemenscritical · 9.8
ssa-443410
Siemens is assessing the impact of the Node2Shell vulnerability (CVE-2026-111497), a buffer overflow in the Brotli decoder versions 1.0.3 through 1.2.0, on its Industrial Edge Management software. If no Management Applications are installed, no action is required because the affected functionality is not used or exposed; if Management Applications are installed, customers should apply the stated mitigations until a fix is available. The flaw allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code via a crafted Brotli-compressed stream, and Siemens recommends protecting network access to devices with appropriate mechanisms.
csaf_siemenscritical · 9.8
ssa-898633
Siemens reports that its RUGGEDCOM APE1808 industrial devices running Palo Alto Networks PAN-OS are affected by the Node2Shell vulnerability (CVE-2026-111497), a buffer overflow in the Brotli decoder that lets a remote unauthenticated attacker corrupt memory, disclose sensitive data, cause a denial of service, or potentially execute arbitrary code via a crafted compressed stream. Siemens directs customers to apply the workarounds in Palo Alto Networks' upstream advisory and to restrict network access to affected devices. No severity rating is stated in this advisory.
csaf_welotecgmbhcritical · 9.8
vde-2026-127
Two memory-safety flaws in the PHP runtime bundled with Welotec SMART EMS let an unauthenticated remote attacker who can reach the SMART EMS Web UI run arbitrary code with the permissions of the PHP web worker and application container, potentially accessing or changing application data and credentials, altering behaviour, establishing persistence, or disrupting availability. All SMART EMS versions up to and including v3.5.3 are affected, and the advisory rates this as high severity. The fix is to update SMART EMS to version 3.5.4 or later, and until then to keep the Web UI off the internet and behind segmentation, firewall rules or a VPN.