- EPSS 0.65%
- Veröffentlicht 11.08.2026 12:20:24
- Zuletzt bearbeitet 23.10.2026 21:10:00
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unau...
- EPSS 0.71%
- Veröffentlicht 22.10.2026 13:35:41
- Zuletzt bearbeitet 03.11.2026 22:17:44
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory content...
- EPSS 5.99%
- Veröffentlicht 21.10.2026 09:15:32
- Zuletzt bearbeitet 02.11.2026 14:52:13
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been fr...
- EPSS 25.98%
- Veröffentlicht 13.10.2026 15:31:07
- Zuletzt bearbeitet 13.10.2026 19:24:36
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
- EPSS 0.25%
- Veröffentlicht 15.10.2026 20:56:58
- Zuletzt bearbeitet 31.10.2026 04:18:16
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
- EPSS 0.56%
- Veröffentlicht 13.10.2026 01:05:46
- Zuletzt bearbeitet 02.11.2026 13:30:16
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitL...
- EPSS 0.17%
- Veröffentlicht 15.10.2026 12:08:22
- Zuletzt bearbeitet 03.11.2026 07:20:59
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. ...
- EPSS 11.62%
- Veröffentlicht 21.10.2026 09:15:32
- Zuletzt bearbeitet 02.11.2026 14:52:09
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocati...