- EPSS 0.65%
- Published 11.08.2026 12:20:24
- Last modified 23.10.2026 21:10:00
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unau...
- EPSS 0.71%
- Published 22.10.2026 13:35:41
- Last modified 30.10.2026 20:30:11
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory content...
- EPSS 5.99%
- Published 21.10.2026 09:15:32
- Last modified 02.11.2026 14:52:13
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been fr...
- EPSS 25.98%
- Published 13.10.2026 15:31:07
- Last modified 13.10.2026 19:24:36
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
- EPSS 0.3%
- Published 30.10.2026 16:42:06
- Last modified 31.10.2026 04:18:16
Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and ...
- EPSS 0.25%
- Published 15.10.2026 20:56:58
- Last modified 31.10.2026 04:18:16
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.
- EPSS 0.56%
- Published 13.10.2026 01:05:46
- Last modified 02.11.2026 13:30:16
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitL...
- EPSS 0.17%
- Published 15.10.2026 12:08:22
- Last modified 03.11.2026 07:20:59
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. ...
- EPSS 11.62%
- Published 21.10.2026 09:15:32
- Last modified 02.11.2026 14:52:09
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocati...