Bulletins

CISA (ALL)
08/13/2026

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to manipulate brain stimulation parameters and override safety limits.

The following versions of Flow Neuroscience FL-100 are affected:

  • Flow Neuroscience FL-100
  • Halo Neuroscience FL-100
CISA (ALL)
08/13/2026

View CSAF

Summary

A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality. Siemens has released new versions for the …

CISA (ALL)
08/13/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to decrypt sensitive data, bypass authentication controls, gaining unauthorized access to read arbitrary files on the system, or gain unauthorized access to protected system resources.

The following versions of Johnson Controls Inc. Airwall are affected:

CISA (ALL)
08/13/2026

View CSAF

Summary

Parasolid is affected by an out of bounds read vulnerability that could be triggered when the application reads files in X_T format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new versions for the affected products and …

CISA (ALL)
08/13/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to read data from the device or gain access to affected workstations.

The following versions of ANDRITZ HIPASE-250 and 250 SCALA are affected:

  • HIPASE-250 <=7.20 (CVE-2026-65309, CVE-2026-65310, CVE-2026-65311, CVE-2026-65313)
  • 250 SCALA <=7.20 …
SIEMENS CERT
08/13/2026
Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attacker could leverage the vulnerability to perform remote …
CISA (ALL)
08/12/2026

View CSAF

Summary

Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens recommends to contact customer support for additional information, and follow Fortinet advisory for workarounds and mitigation measures.

The following versions of Siemens RUGGEDCOM APE1808 are affected:

CISA (ALL)
08/11/2026

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to use hidden commands to disable electrical safety mechanisms or modify other stimulation output settings.

The following versions of Pulsetto Vagus Nerve Stimulator are affected:

  • Pulsetto Vagus Nerve Stimulator vers:all/* (CVE-2026-18844)