Bulletins

CISA (ALL)
10/15/2026

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server.

The following versions of Thermo Fisher Torrent Suite Software are affected:

  • Torrent Suite Software <=5.18 (CVE-2026-107777)
…
CVSS Vendor
CISA (ALL)
10/15/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.

The following versions of J4Care dcm4che are affected:

  • dcm4chee-arc-light 5.35.1 (CVE-2026-97851, CVE-2026-107621, …
SIEMENS CERT
10/15/2026
The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens is preparing fixes and recommends …
CISA (ALL)
10/13/2026

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary …

CISA (ALL)
10/13/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication.

The following versions of Swann Communications SWIFI-SE2KIC are affected:

  • SWIFI-SE2KIC firmware <=2.0.22 (CVE-2026-107605, CVE-2026-107606, CVE-2026-107607)
…
CVSS Vendor Equipment
SIEMENS CERT
10/13/2026
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. SIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there …
SIEMENS CERT
10/13/2026
KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected products and recommends to update to the latest versions. KACO new energy …
SIEMENS CERT
10/13/2026
Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens recommends to contact customer support for additional information, and follow Fortinet advisory for workarounds and mitigation measures.