Summary
Successful exploitation of these vulnerabilities could allow attackers to bypass security, crash systems, execute unauthorized actions, or compromise data.
The following versions of ABB Ability Zenon are affected:
- IIoT services with MongoDB (4.2) installed on ABB Ability Zenon vers:all/*
Summary
Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device.
The following versions of Johnson Controls Inc. TL280 are affected:
- TL280 <5.63
| CVSS | Vendor | Equipment | Vulnerabilities |
|---|
Summary
Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened.
The following versions of Medixant RadiAnt DICOM are affected:
- RadiAnt DICOM <=2025.2
| CVSS | …
|---|
Summary
Successful exploitation of this vulnerability could allow an attacker to perform unauthorized vehicle control operations.
The following versions of Acrisure KARR BT and DR-100 are affected:
- KARR BT firmware <July_20_2026
- DR-100 firmware <July_20_2026
| CVSS | … |
|---|
Summary
Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulting in inaccurate test results.
The following versions of Thermo Fisher Applied Biosystems Genetic Analyzers are affected:
- Applied Biosystems 3500/3500xL Series Data Collection …
Summary
Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition …
Open source software (OSS) is embedded in nearly every modern system, from business applications to critical infrastructure. Our new Open Source Software: Security Principles and Practices guidance helps agencies securely use, evaluate, and publish open source software. It covers OSS risk management across the full lifecycle, introduces the C4 Framework …
Summary
Schneider Electric is aware of a vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCADA System) product. The [IGSS](https://igss.schneider-electric.com/) product is a state-of-the-art SCADA system used for monitoring and controlling industrial processes. The IGSS Definition module is a design-time component used by …