BOSCH-SA-069646:7-Zip 26.01 and older contains a heap-based Buffer Overflow vulnerability that can be triggered via a crafted XZ archive, allowing the attacker to execute arbitrary code in the current user's context. The vulnerable component 7-Zip is bundled in its portable version with the Bosch Rexroth AG software PRI7000. An attacker …
Summary
Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by navigating to a …
Advisory at a Glance
|
Title |
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data |
|---|---|
|
Original Publication |
… |
Summary
The following versions of Grid Protection Alliance openPDC and openHistorian are affected:
- openPDC <2.9.477, <2.9.482 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022)
- openPDC (Docker image) <2.9.477, <2.9.482 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022, CVE-2026-105278)
- openHistorian <2.8.580, <2.8.585 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022)
Summary
Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by navigating to a …
Summary
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code.
The following versions of Satel Netco Design are affected:
- Satel …
Summary
Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution.
The following versions of Savannah lwIP SMTP client are affected:
- lwIP SMTP client 2.2.1 (CVE-2026-15340)
| CVSS | …
|---|