CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04, WAGO 750-881 prior to FW09, and WAGO 0758-0874-0000-0111 that allows a malicious user to edit and view settings without authentication by accessing a specific URL on the web server.
W urządzeniach Moxa NPort występuje problem z administracyjnymi hasłami, które mogą być próbowane bez konieczności uwierzytelnienia. Dotyczy to wielu wersji różnych serii NPort, w tym 5110, 5130, 5150, 5200, 5400, 5600 oraz innych.
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller versions FRN 16.00 through 21.00 related to the processing of malformed CIP packets. An attacker may exploit this vulnerability to overflow a stack-based buffer, potentially allowing code execution on the controller or causing a fault that results in a denial of service.
An issue was discovered in Moxa SoftCMS versions prior to 1.6 related to improper input sanitization. A remote attacker may gain access to SoftCMS with administrator privileges through specially crafted input (SQL INJECTION).
An issue was discovered in Siemens SICAM PAS before version 8.00 related to a factory account with hard-coded passwords. Attackers might gain privileged access to the database over Port 2638/TCP.
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient safeguards in the application's database for protecting credentials.
An issue was discovered in IBHsoftec S7-SoftPLC prior to version 4.12b related to a buffer overflow in PLC controllers. Object memory can read a network packet larger than the available space, leading to a Heap-based Buffer Overflow.
An issue was discovered in Moxa OnCell OnCellG3470A-LTE and various AWK and WAC series devices that allows a user to execute arbitrary OS commands on the server.
An issue exists in Schneider Electric ConneXium firewalls that can trigger a stack-based buffer overflow during the SNMP login authentication process, potentially allowing an attacker to remotely execute code.
An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.
An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0 related to the lack of authentication attempt limits, which may allow a brute force attack method.
An issue was discovered in Ecava IntegraXor Version 5.0.413.0 related to SQL injection vulnerability in the web server. Unsanitized parameters may lead to unauthorized access to the database.
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older, where undocumented hard-coded credentials allow access to the device.
An issue was discovered on Schneider Electric IONXXXX series power meters, including ION73XX, ION75XX, ION76XX, ION8650, ION8800, and PM5XXX. No authentication is configured by default, allowing unauthorized users to access the device management portal and make configuration changes.
Multiple integer overflows in the TRE library and musl libc can lead to memory corruption. Attackers can exploit a large number of states or tags, resulting in an out-of-bounds write.
In Exponent CMS version 2.3.9, the install/index.php file allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter.
Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.
MCollective versions 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allow remote attackers to execute arbitrary code via the mco ping command.
The generate_smb_nt_hash function in GOsa allows remote attackers to execute arbitrary commands via a crafted password.
The click/install.py file in the click library does not require files in package filesystem tarballs to start with './', allowing remote attackers to install an alternate security policy and gain privileges via a crafted package.