Summary
Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to …
Summary
The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on …
Summary
SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation.
The following versions of Siemens …
CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as “php2shell,” allow for unauthenticated remote code execution in PHP and affect all PHP installations serving web requests. Organizations should immediately update to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 …
Summary
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
The …
Summary
Successful exploitation of these vulnerabilities could allow an attacker to obtain and disclose sensitive information.
The following versions of Moxa AIG-302 ThingsPro Edge are affected:
- Moxa AIG-302 ThingsPro Edge firmware <=1.4.0 (CVE-2026-109812, CVE-2026-109813)
| CVSS | Vendor | …
|---|
Advisory at a Glance
| Title | #StopRansomware: SafePay Ransomware |
|---|---|
| Original Publication | October 20, 2026 |
| Executive Summary |
This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses … |
Summary
Successful exploitation of these vulnerabilities could crash the Windows kernel.
The following versions of HMS Networks PEAK-System PCAN Windows drivers are affected:
- PEAK-System Device Driver Setup <=5.1.2.1151 (CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2026-105960)
- PCAN Windows CAN device drivers <=5.1.2 (CVE-2026-109576, CVE-2026-101103, …