Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
3692advisories found
cvelistv5high · 8.4
cve-2026-71969
This vulnerability affects OP-TEE, the trusted execution environment operating system used in vehicle ECUs, secure gateways, and key management systems across multiple automotive platforms. A malicious Trusted Application could exploit a buffer underwrite in RSA encryption operations to corrupt secure-world memory, potentially allowing an attacker to compromise critical security functions like secure boot, key storage, or vehicle authentication. The severity is high because it requires a malicious app already running in the trusted environment, but successful exploitation could undermine the entire security foundation of affected vehicle systems.
csaf_susehigh · 8.3
suse-su-2026:4889-1
This Linux kernel live patch for SUSE Linux Enterprise 15 SP7 fixes two security flaws: a heap buffer overflow in the iSCSI target login handling (CVE-2026-63887) and a multiplication overflow leading to out-of-bounds memory reads in the Ceph filesystem client (CVE-2026-68158). An attacker could exploit the iSCSI flaw by sending a crafted login request that overflows an 8 KiB buffer by roughly 24 KiB, and could exploit the Ceph flaw by sending a corrupted OSD map message that bypasses bounds checks and causes out-of-bounds reads. The advisory does not state an explicit severity rating for either issue. This could be relevant where the Linux kernel is deployed in automotive systems, for example in infotainment, telematics, or gateway ECUs running SUSE Linux Enterprise. Confirm applicability through the product SBOM or dependency inventory.
csaf_susehigh · 8.3
suse-su-2026:4888-1
This SUSE Linux Enterprise 15 SP6 live-patch update fixes three Linux kernel vulnerabilities: a 9p filesystem reference-counting flaw that can cause a use-after-free, an iSCSI target login buffer overflow of roughly 24 KiB in the kernel heap, and a libceph osdmap multiplication overflow leading to out-of-bounds reads. An attacker able to trigger these paths could corrupt memory, crash the system, or read out-of-bounds data, though the advisory does not assign an explicit severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
csaf_susehigh · 8.3
suse-su-2026:4793-1
This SUSE Linux Enterprise 12 SP5 kernel live patch fixes four kernel vulnerabilities, including a netfilter flaw where packet-handling code accesses an Ethernet MAC header without first confirming the packet is associated with an Ethernet device, and a KVM flaw where a page-offset overflow in SEV debug encryption can write beyond a 4096-byte buffer, causing memory corruption. The other two issues are a heap buffer overflow in iSCSI target login text encoding (up to roughly 24 KiB overrun) and an integer overflow in Ceph osdmap decoding that can lead to out-of-bounds reads. The advisory does not state severity ratings for these CVEs. This could be relevant where the Linux kernel is deployed in automotive systems, since kernel networking and virtualization components may be present in such environments; confirm applicability through the product SBOM or dependency inventory.
csaf_susehigh · 8.3
suse-su-2026:4785-1
This Linux kernel live-patch update for SUSE Linux Enterprise 15 SP5 fixes two security issues: a heap buffer overflow in the iSCSI target login handling (CVE-2026-63887), where unchecked writes into an 8 KiB buffer can overrun by roughly 24 KiB, and a multiplication overflow in libceph's OSD map decoding (CVE-2026-68158) that can lead to out-of-bounds memory reads when processing a maliciously corrupted map. An attacker able to send crafted iSCSI login requests or corrupted Ceph OSD map messages could trigger memory corruption or out-of-bounds access, potentially causing crashes or other harm. The advisory does not state an explicit severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, but the advisory does not confirm any automotive deployment; confirm applicability through the product SBOM or dependency inventory.
csaf_redhathigh · 8.3
rhsa-2026:77612
Red Hat OpenShift Container Platform 4.16.73 is a Kubernetes-based cloud application platform, and this update fixes three Linux kernel flaws rated Important: an SCTP integer overflow that can cause an out-of-bounds write and denial of service, an IPv6 AH6 validation flaw that can allow a local unprivileged attacker to escalate to root, and a TUN/TAP headroom underflow that can cause memory corruption and system instability. This could be relevant where the underlying Linux kernel or OpenShift components are deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
csaf_redhathigh · 8.3
rhsa-2026:77548
Red Hat OpenShift Container Platform 4.17.59 is a Kubernetes application platform update that fixes three Linux kernel flaws in the SCTP, xfrm/AH6 and TUN/TAP networking components, rated Important severity. An attacker could exploit these to cause memory corruption leading to denial of service, system crashes, or in the xfrm case local privilege escalation to root from an unprivileged account. This could be relevant where the underlying kernel or OpenShift components are deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
csaf_redhathigh · 8.3
rhsa-2026:77320
Red Hat OpenShift Container Platform 4.13.72 is a Kubernetes-based cloud application platform, and this advisory bundles fixes for several flaws in components such as Samba, GnuTLS, acl, GLib, and the Linux kernel, including issues that could allow an authenticated user to overwrite protected files, local privilege escalation, information disclosure, and denial of service. The advisory does not establish any automotive connection, and the affected products are general-purpose server, container, and operating system components. This could be relevant where such components are deployed in automotive systems, but confirm applicability through the product SBOM or dependency inventory.
csaf_redhathigh · 8.3
rhsa-2026:77315
Red Hat OpenShift Container Platform 4.12.100 is a Kubernetes-based cloud application platform, and this advisory addresses three Linux kernel flaws: an SCTP integer overflow that can cause an out-of-bounds write and denial of service, an IPv6 AH6 routing header validation flaw that can allow a local unprivileged attacker to escalate to root, and a TUN/TAP driver integer underflow that can cause memory corruption and system instability. The advisory rates the overall security impact as Low, though it separately classifies the AH6 issue as Important. This could be relevant where OpenShift or its underlying kernel components are deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
csaf_redhathigh · 8.3
rhsa-2026:79035
Red Hat OpenShift Container Platform 4.18.57 is a Kubernetes container platform update that fixes three Linux kernel flaws rated Important severity, including an SCTP integer overflow causing an out-of-bounds write and denial of service, an IPv6 AH6 routing header validation flaw enabling local privilege escalation to root, and a TUN/TAP driver integer underflow causing memory corruption. This could be relevant where the affected kernel components are deployed in automotive systems, for example in embedded Linux controllers or telematics units running containerized workloads. Confirm applicability through the product SBOM or dependency inventory.
csaf_siemenshigh · 8.3
ssa-968435
The Industrial Edge App Publisher from Siemens has two vulnerabilities that can be chained together. An attacker on the same network could impersonate the management server and run arbitrary code on the victim's machine. Siemens has released an update and recommends installing the latest version.
cvelistv5high · 8.3
cve-2026-82549
A vulnerability was identified in Linux Foundation Magma 1.9.0, specifically in the SecurityModeComplete Handler, which fails to properly validate an integrity check value. An attacker could exploit this remotely, and the exploit is publicly available, potentially compromising the integrity of the communication session. This could be relevant where Magma is deployed in automotive systems, such as in fleet or telematics networks, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.3
cve-2026-77236
FreeRTOS-Kernel versions before 11.3.1 lack a minimum size check in the SecureContext_AllocateContext function, which could allow a local user to trigger an out-of-bounds write and corrupt secure-world heap metadata by supplying an undersized stack size. This could be relevant where FreeRTOS-Kernel is deployed in automotive systems, such as in embedded control units, and the advisory recommends upgrading to version 11.3.1 or later to remediate the issue. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.3
cve-2026-77235
FreeRTOS-Kernel versions before 11.3.1 contain a missing privilege check in the secure context cleanup handler, which could allow a local user to trigger a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. The advisory does not confirm automotive deployment, but this could be relevant where FreeRTOS-Kernel is deployed in automotive systems, as it is a real-time operating system kernel often used in embedded environments. Confirm applicability through the product SBOM or dependency inventory. The remediation is to upgrade to version 11.3.1 or later.
fkie_nvdhigh · 8.3
cve-2026-16317
This vulnerability affects the TLS 1.3 encryption library s2n-tls, which is used in automotive cloud services for secure OTA updates and telematics data transmission. An active man-in-the-middle attacker can silently drop individual encrypted data records without detection, potentially causing request/response desynchronization or undetectable data loss in connected vehicle systems. This is a high-severity issue affecting all TLS 1.3 connections, and upgrading to s2n-tls v1.7.6 is recommended.
fkie_nvdhigh · 8.2
fkie_cve-2026-119086
FreeRTOS-Kernel before V11.3.3, on MPU-enabled ports with queue sets enabled, has a missing queue-set type validation flaw in the queue-set selection system call that lets a local unprivileged task write attacker-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged memory across the MPU isolation boundary. This could be relevant where FreeRTOS-Kernel is deployed in automotive or embedded systems, since the advisory does not itself confirm any automotive product impact. Confirm applicability through the product SBOM or dependency inventory.
fkie_nvdhigh · 8.2
fkie_cve-2026-115417
The advisory describes a memory allocation flaw with an excessively large size value in the MQTT 3.1.1 compatibility adapter of AWS aws-c-mqtt before version 0.16.2, which could let a remote actor cause a denial of service in the client application. The advisory does not state a severity rating. This could be relevant where aws-c-mqtt is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
fkie_nvdhigh · 8.2
fkie_cve-2026-102552
Amazon FreeRTOS-Plus-TCP before V4.4.2 has a DNS resolver flaw where the source of a communication channel is not properly verified, which might let a remote third party insert a chosen address into the device's DNS cache using a forged DNS reply. This could be relevant where FreeRTOS-Plus-TCP is deployed in automotive systems, since the advisory does not confirm an automotive connection. Confirm applicability through the product SBOM or dependency inventory.
fkie_nvdhigh · 8.2
fkie_cve-2026-68907
libIEC61850, an open-source implementation of IEC 61850 client and server protocols, contains a flaw prior to version 1.6.2 in which a helper function reads uninitialized stack memory when building a dataset reference, allowing a remote request to crash servers that have dynamic dataset service enabled and a dataset access handler installed. The advisory identifies denial of service as the primary impact, with caller stack corruption also observed, and the issue is fixed in version 1.6.2. This could be relevant where libIEC61850 is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
csaf_cisahigh · 8.2
icsa-26-288-01
Eclipse Milo, an open-source OPC UA server/client library, contains multiple vulnerabilities in versions 0.6.0 through 1.1.4 that could let attackers delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. This could be relevant where Eclipse Milo is deployed in automotive systems, since OPC UA is used in industrial and manufacturing environments. Confirm applicability through the product SBOM or dependency inventory.
csaf_siemenshigh · 8.2
ssa-333035
Siemens APOGEE, TALON and Desigo PXC/PXM building automation products contain multiple vulnerabilities in their packet handling, web service and FTP service that could let an unauthenticated remote attacker read portions of device memory or cause a denial of service, impacting device availability. Siemens has released fixes for several affected products and recommends updating to the latest versions, plus specific mitigations where fixes are not yet available. Siemens also recommends protecting network access to these devices with appropriate mechanisms and running them in a protected IT environment.
csaf_redhathigh · 8.2
rhsa-2026:81532
The advisory covers a set of memory-safety flaws in the PCRE2 regular expression library, including out-of-bounds writes and reads that an attacker could trigger with crafted regular expressions or invalid UTF data, potentially causing data corruption, denial of service, or arbitrary code execution. Red Hat rates the overall update as Important, with individual flaws ranging from Low to Important. PCRE2 is a general-purpose library, so this could be relevant where it is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
csaf_redhathigh · 8.2
rhsa-2026:81522
The advisory covers a set of memory-safety flaws in the PCRE2 regular expression library, including out-of-bounds writes and reads that could allow arbitrary code execution, data corruption, or denial of service, and Red Hat rates the overall update as Important. The affected component is a general-purpose pattern-matching library, not a vehicle-specific product, so this could be relevant where PCRE2 is deployed in automotive systems, such as embedded infotainment, telematics, or diagnostic software that processes untrusted input. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.2
cve-2026-107837
RIOT OS versions 2026.07 and earlier contain an out-of-bounds read in the 6LoWPAN SFF fragment handling code, where a malformed fragment can cause the network stack to read beyond the packet buffer. A remote attacker could exploit this to potentially disclose memory and crash the network stack, though no severity rating is stated in the advisory. This could be relevant where RIOT OS is deployed in automotive or embedded systems; confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.2
cve-2026-76468
Cisco released a hardening update for several Meraki products, including MR wireless access points, MV cameras, MX security appliances, and Campus Gateway software, fixing multiple input-validation flaws tracked as CVE-2026-76468. An attacker could potentially exploit these improper input validation weaknesses, though the advisory does not state a specific severity rating or detailed impact. This could be relevant where Meraki networking and camera components are deployed in automotive or road-transport environments, such as fleet, telematics, or connected-site networks. Confirm applicability through the product SBOM or dependency inventory.