Summary
The following versions of Rockwell Automation Logix Platform are affected:
- ControlLogix 5580 <=V33, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012 (CVE-2026-9637, CVE-2026-9637, CVE-2026-9637, CVE-2026-9637)
- CompactLogix 5380 <=V33, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012 (CVE-2026-9637, CVE-2026-9637, CVE-2026-9637, CVE-2026-9637)
- GuardLogix 5580 <=V33, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012 (CVE-2026-9637, CVE-2026-9637, CVE-2026-9637, CVE-2026-9637)
- …
Summary
Successful exploitation of these vulnerabilities could crash the device being accessed; an out-of-bounds write condition may allow remote code execution.
The following versions of Rockwell Automation Historian ME are affected:
- Series B 5.202 (CVE-2025-12768, CVE-2026-12661)
- Series C 7.101 (CVE-2025-12768, CVE-2026-12661)
BOSCH-SA-223618: Multiple vulnerabilities including stack-based buffer overflows, heap-based buffer overflows, and out-of-bounds reads have been identified in several Bosch Sensortec software components: the BHI360 SensorAPI, BHI385 SensorAPI, BME690 SensorAPI, and the COINES SDK. Depending on the specific vulnerability, a locally/physically positioned attacker, or a compromised peripheral device (connected via I2C, …
Summary
Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service (DoS) condition, a timeout error, or a communication delay by sending a specially crafted UDP packet to the product.
The following versions of Mitsubishi Electric Multiple FA Products (Update D) …
Summary
Successful exploitation of these vulnerabilities could allow an attacker to take control over the device.
The following versions of Xiiaozet LK100W are affected:
- LK100W <2.1.240 (CVE-2026-78037, CVE-2026-78239, CVE-2026-76943)
| CVSS | Vendor | Equipment | Vulnerabilities |
|---|
Summary
Successful exploitation of these vulnerabilities could allow an attacker to read or write arbitrary local files, cause the application to issue outbound network requests, or intercept the connection to impersonate the trusted peer, complete the TLS handshake, and read or modify the protected communications.
…
Summary
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary commands or code remotely on affected systems.
The following versions of All-Line Equipment Company Fuel-Boss are affected:
- Fuel-Boss V1 Standard >=|<=PHP_7.1.5_7.1.5 (CVE-2018-19518, CVE-2019-11043)
- Fuel-Boss V1 Portal >=|<=PHP_7.1.5_7.1.5 (CVE-2018-19518, CVE-2019-11043)
- …
Summary
Successful exploitation of these vulnerabilities could allow an attacker to fully compromise the device.
The following versions of Ebyte NA111-M are affected:
- NA111-M Firmware 9013-2-17 (CVE-2026-73125, CVE-2026-76179, CVE-2026-75814, CVE-2026-76940, CVE-2026-77966, CVE-2026-73809, CVE-2026-71187, CVE-2026-75548, CVE-2026-69658, CVE-2026-76133, CVE-2026-73819, CVE-2026-77975, CVE-2026-77977)