Bulletins

CISA (ALL)
10/15/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.

The following versions of Guangzhou Juan IoT Technology EseeCloud are affected:

  • EseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664)
  • EseeCloud Firmware <=4.9.86.0 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664)
…
CISA (ALL)
10/15/2026

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server.

The following versions of Thermo Fisher Torrent Suite Software are affected:

  • Torrent Suite Software <=5.18 (CVE-2026-107777)
…
CVSS Vendor
SIEMENS CERT
10/15/2026
The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens is preparing fixes and recommends …
CISA (ALL)
10/13/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication.

The following versions of Swann Communications SWIFI-SE2KIC are affected:

  • SWIFI-SE2KIC firmware <=2.0.22 (CVE-2026-107605, CVE-2026-107606, CVE-2026-107607)
…
CVSS Vendor Equipment
CISA (ALL)
10/13/2026

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary …

SIEMENS CERT
10/13/2026
PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable …
SIEMENS CERT
10/13/2026
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens has released new versions for the affected products and recommends to update …
SIEMENS CERT
10/13/2026
Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens recommends to contact customer support for additional information, and follow Fortinet advisory for workarounds and mitigation measures.