Bulletins

SIEMENS CERT
10/13/2026
RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and …
SIEMENS CERT
10/13/2026
Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is …
SIEMENS CERT
10/13/2026
OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix …
BOSCH PSIRT
10/12/2026

BOSCH-SA-069646:7-Zip 26.01 and older contains a heap-based Buffer Overflow vulnerability that can be triggered via a crafted XZ archive, allowing the attacker to execute arbitrary code in the current user's context. The vulnerable component 7-Zip is bundled in its portable version with the Bosch Rexroth AG software PRI7000. An attacker …

CISA (ALL)
10/08/2026

Advisory at a Glance 

Title 

Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data 

Original Publication 

…
CISA (ALL)
10/08/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by navigating to a …

CISA (ALL)
10/08/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code.

The following versions of Satel Netco Design are affected:

  • Satel …
CISA (ALL)
10/08/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by navigating to a …