Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
3692advisories found
cvelistv5critical · 9.8
cve-2026-78012
A stack-based buffer overflow in Pyramid Solutions NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer, potentially causing memory corruption, a device crash, or a remote attack vector without the originating device receiving an error. This affects multiple Pyramid Solutions EtherNet/IP Adapter and Scanner DLL and Development Kits, with and without CIP Security. This could be relevant where these EtherNet/IP stacks are deployed in automotive or industrial control systems, but the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
csaf_sauteragcritical · 9.8
vde-2026-093
A vulnerability in the firmware update process of SAUTER Building Controllers could allow an unauthenticated remote attacker to execute unauthorized code, potentially gaining full control of the device and affecting building automation functions. The issue is a race condition that can bypass security controls, and fixes are available in firmware updates for affected models. This is directly relevant to automotive contexts only if such building controllers are used in automotive facilities, which is not stated; confirm applicability through the product SBOM or dependency inventory.
csaf_weidmuellerinterfacegmbhcokgcritical · 9.8
vde-2026-083
Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G have multiple vulnerabilities. An unauthenticated attacker with network access can execute arbitrary shell commands with root privileges by injecting a crafted username into the web management interface's HTTP Basic Authentication header, potentially creating a persistent backdoor. Additionally, on the IE-SR-2TX-WL-4G variants, an attacker who can send SMS messages can disable SMS password authorization by submitting 5 or more invalid passwords, after which any SMS command is executed without a password, potentially causing limited configuration tampering, information leakage, or full loss of availability. Weidmueller has released firmware updates to fix these issues.
cvelistv5critical · 9.8
cve-2026-19685
NetworkManager, a network connection management component, has a vulnerability where the private_user restriction is not applied to the 802-1x.ca-path and phase2-ca-path properties. This allows an unprivileged local user to point a WPA-Enterprise connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point. The advisory lists affected Red Hat Enterprise Linux and OpenShift products, and this could be relevant where NetworkManager is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
csaf_frauschersensortechnikgmbhcritical · 9.8
vde-2026-078
Frauscher Sensortechnik's FDS102 device for railway signaling systems has multiple security flaws that could let attackers execute code, access sensitive railway track data, hijack admin sessions, or create privileged accounts. The issues range from unauthenticated file downloads to session hijacking and privilege escalation, with severity affecting confidentiality, integrity, and availability. Frauscher recommends updating to FDS102 v2.14.0 and restricting network access to authorized personnel.
nvdcritical · 9.8
cve-2026-74901
openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py, where AES-GCM decryption failures trigger a fallback to unauthenticated AES-CTR mode. An attacker could modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without detection. This could be relevant where openssl_encrypt is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdcritical · 9.8
cve-2026-74900
openssl_encrypt versions before 1.4.0 contain a critical vulnerability in its PQC simulation mode, where a failed key encapsulation mechanism (KEM) decapsulation silently generates a deterministic shared secret using only 16 bytes of the private key and public data. An attacker who obtains those 16 bytes could compute the shared secret and decrypt all ciphertext, as the fallback occurs without any error. This could be relevant where openssl_encrypt is deployed in automotive systems, such as for secure communications or data protection; confirm applicability through the product SBOM or dependency inventory.
nvdcritical · 9.8
cve-2026-74889
openssl_encrypt versions before 1.4.0 use HKDF with no salt and a static info parameter in key normalization, which reduces entropy extraction and makes key derivation predictable. An attacker could exploit this to weaken cryptographic security, particularly against multi-target attacks, when identical inputs are used. This could be relevant where openssl_encrypt is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
csaf_phoenixcontactgmbhcokgcritical · 9.8
vde-2026-008
This vulnerability affects EV charging infrastructure including wallboxes, DC fast chargers, and charging station management systems, specifically the Phoenix Contact CHARX SEC-3xxx series charging controllers. An unauthenticated remote attacker can exploit multiple flaws—including missing authentication on the MQTT broker, command injection, and privilege escalation—to fully compromise the device, potentially interrupting charging operations, stealing data, or installing malicious firmware. The severity is critical, as these vulnerabilities can lead to a complete loss of confidentiality, integrity, and availability, though Phoenix Contact recommends using the devices only in closed networks with firewalls until firmware version 1.9.1 is released.
fkie_nvdcritical · 9.8
cve-2026-16462
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically the PROCON-WEB SCADA system's 'GetGridData' endpoint. An unauthenticated attacker can remotely execute arbitrary SQL commands, potentially allowing them to steal sensitive production data, manipulate manufacturing processes, or disrupt assembly line operations. This is a critical severity issue that could halt vehicle production or cause quality defects across multiple vehicle models.
csaf_weidmuellerinterfacegmbhcokgcritical · 9.8
vde-2026-085
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically the PROCON-WEB SCADA software used for monitoring and controlling production equipment. An unauthenticated attacker on the network can exploit a SQL injection flaw to read, modify, or delete data and execute arbitrary commands, potentially disrupting vehicle assembly operations. Weidmueller strongly recommends updating to version 6.11.3 and limiting network exposure to trusted systems.
csaf_ncscnlcritical · 9.8
ncsc-2026-0256
This vulnerability affects Oracle Communications products, which are used in telecom networks that can support connected vehicle services like fleet management and emergency call systems. An attacker could exploit these flaws to fully take over the server, execute malicious code, or steal sensitive data, with the most critical issues allowing a complete system compromise without needing a password. The risk is high, as 12 of the 213 fixed vulnerabilities have a severity score of 9 or higher out of 10.
fkie_nvdcritical · 9.8
cve-2026-64620
This vulnerability affects the Remote Desktop Protocol (RDP) stack used in some automotive diagnostic tools and remote vehicle access systems that rely on RDP for technician connectivity. An unauthenticated attacker can send a specially crafted message to overflow a heap buffer before authentication, potentially causing a denial of service that could disrupt remote diagnostics or fleet management operations. The severity is high because it requires no credentials and can crash the RDP service, though it does not directly impact vehicle driving controls.
csaf_siemenscritical · 9.8
ssa-585531
This vulnerability affects the SIDIS Secured SmartPlug, an industrial smart plug used in automotive manufacturing plants and assembly lines for secure power management of production equipment. Multiple flaws in OpenSSL, OpenSSH, and other components could allow an attacker to crash the device, execute malicious code, or intercept communications, with the most severe issues enabling remote code execution. Siemens has released version V7.26.0310 to fix these problems, and updating immediately is strongly recommended.
csaf_siemenscritical · 9.8
ssa-019113
This vulnerability affects the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP, which is a specialized industrial controller used in automotive manufacturing plants and assembly lines for programmable logic control. Multiple flaws in the embedded Linux kernel and OpenSSH components could allow an attacker with local or network access to escalate privileges, cause system crashes, or leak sensitive information. Siemens is preparing fixes and recommends protecting network access to these devices as a security measure.
csaf_siemenscritical · 9.8
ssa-470355
This vulnerability affects CADRA, a Siemens engineering software used in automotive manufacturing plants for design and production processes. Multiple flaws in the zlib compression library and Foxit PDF components could allow an attacker to crash the software or potentially execute malicious code by sending a specially crafted file. Siemens has released an updated version to fix these issues, and given the critical role of CADRA in vehicle production, immediate updating is strongly recommended to prevent disruptions on the factory floor.
csaf_siemenscritical · 9.8
ssa-734552
This vulnerability affects the OpenSSL cryptographic library used in Siemens Desigo CC building management systems, which can also be deployed in automotive manufacturing plants and industrial facilities for environmental control and energy management. A remote attacker could send a specially crafted message to trigger a stack buffer overflow, potentially causing a system crash or allowing them to execute malicious code on the affected device. Siemens has released software updates to fix this issue, and strongly recommends applying them as soon as possible to prevent potential disruption to facility operations.
fkie_nvdcritical · 9.6
fkie_cve-2026-102693
RIOT is an open-source microcontroller operating system for IoT and embedded devices, and prior to version 2026.04 its ATWINC15x0 Wi-Fi driver copies an SSID without checking the destination buffer size. When the dynamic connect module is enabled, a nearby attacker can broadcast a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This could be relevant where RIOT is deployed in automotive or embedded systems; confirm applicability through the product SBOM or dependency inventory.
csaf_siemenscritical · 9.6
ssa-591731
Siemens SIMATIC S7-1500 programmable logic controllers contain multiple vulnerabilities in their web server, all involving improper handling of imported trace files. An attacker could trick an authorized user into importing a malicious trace file, which could let attacker-controlled JavaScript run in that user's browser and perform PLC operations within the scope of that user's permissions. Siemens is preparing fixes and recommends mitigations for products where fixes are not yet available.
cvelistv5critical · 9.6
cve-2026-76464
Cisco released a hardening update for Cisco Meraki MR wireless access points, MV cameras, MX security appliances, and Campus Gateway software to fix buffer management vulnerabilities tracked as CVE-2026-76464. An attacker could potentially exploit these buffer handling flaws, though the advisory does not state a specific severity rating or the exact impact. This could be relevant where these Cisco Meraki components are deployed in automotive systems, such as in vehicle fleets or manufacturing networks. Confirm applicability through the product SBOM or dependency inventory.
nvdcritical · 9.5
cve-2026-8986
This vulnerability affects EV charging infrastructure including wallboxes, DC fast chargers, and charging station management systems. A malicious or compromised OCPP server can send a crafted diagnostics request to the Autel MaxiCharger Single, allowing an attacker to execute arbitrary commands on the charging station. This is a critical vulnerability that could allow an attacker to take full control of the charger, potentially disrupting charging services or using the device as a foothold for further attacks.
fkie_nvdcritical · 9.4
fkie_cve-2026-16438
Mitsubishi Electric GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI (versions 10.97.3 and prior) and MC Works64 (all versions) contain an incorrect privilege assignment flaw where installers grant unnecessary default DCOM permissions to the product administrator account. An attacker who can log in with that same administrator account can launch and operate DCOM objects locally or remotely without the required UAC elevation, potentially disclosing, tampering with, destroying or deleting internal information, or causing a denial-of-service condition. This could be relevant where these products are deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
cvelistv5critical · 9.4
cve-2026-102162
A vulnerability in the wireless gateway service of affected Arista Wi-Fi access points, when captive portal or application firewall is enabled on at least one SSID, could let an unauthenticated network-adjacent attacker send a crafted packet that triggers a stack overflow, causing a denial-of-service condition or potentially allowing arbitrary code execution on the device. The service restarts automatically after a crash, so repeated exploitation attempts are possible. This could be relevant where Arista Wi-Fi access points are deployed in automotive systems, such as manufacturing or logistics environments. Confirm applicability through the product SBOM or dependency inventory.
csaf_sickcritical · 9.4
sca-2026-0010
SICK ICR890-4 and InspectorP6xx industrial devices contain a vulnerability in their SOPAS FileSystemAccess method that allows unintended remote access to internal virtual filesystem paths. An unauthenticated attacker with network access could exploit this to modify internal storage, configuration files, and system directories, potentially causing denial of service, unauthorized configuration changes, or disclosure of sensitive information. The advisory does not specify a CVSS severity score, but recommends minimizing network exposure and restricting access to mitigate the risk.
nvdcritical · 9.4
cve-2026-8987
This vulnerability affects EV charging infrastructure including wallboxes, DC fast chargers, and charging station management systems. An authenticated attacker can exploit a heap overflow in the Autel MaxiCharger Single firmware to crash the device or potentially run malicious code, posing a serious risk to charging operations and network security.