Kieback & Peter DDC Building Controllers
CVE-2026-4293
2026年5月19日,美国CISA发布ICS公告(ICSA-26-139-05),披露Kieback & Peter DDC系列楼宇控制器中存在一个存储型跨站脚本(XSS)漏洞(CVE-2026-4293,CVSS v3 5.3)。该漏洞源
共收录 92 条相关情报。
← 返回所有主题CVE-2026-4293
2026年5月19日,美国CISA发布ICS公告(ICSA-26-139-05),披露Kieback & Peter DDC系列楼宇控制器中存在一个存储型跨站脚本(XSS)漏洞(CVE-2026-4293,CVSS v3 5.3)。该漏洞源
CVE-2026-0300
CISA 发布了一份关于 Siemens RUGGEDCOM APE1808 设备的安全公告,该设备因集成了 Palo Alto Networks PAN-OS 软件而受到 CVE-2026-0300 漏洞的影响。该漏洞位于 PAN-OS
CVE-2026-8598
CISA发布了一份ICS公告(ICSA-26-139-04),披露了ZKTeco CCTV摄像头中存在一个高危漏洞(CVE-2026-8598)。该漏洞涉及摄像头的一个未文档化的配置导出端口,无需身份验证即可访问,导致敏感信息泄露,包括开放
CVE-2025-3465
View CSAF Summary An update is available that resolves vulnerability in the product versions listed as affected in this
CVE-2026-8605 · CVE-2026-8604 · CVE-2026-8602 · CVE-2026-8603
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to perform unauthenticated re
CVE-2026-42897
CISA于2026年5月15日将其已知被利用漏洞(KEV)目录新增一个漏洞CVE-2026-42897,该漏洞为Microsoft Exchange Server中的跨站脚本(XSS)漏洞。CISA根据已发现的在野利用证据将该漏洞列入KEV
CVE-2026-41551
CISA 发布了一份关于 Siemens ROS# 的安全公告 (ICSA-26-134-08),指出该产品存在一个路径遍历漏洞 (CVE-2026-41551, CVSS 9.1 严重)。该漏洞存在于 ROS# 的 file_server
CVE-2026-40175
2026年5月14日,CISA发布了一则关于西门子gPROMS Web Applications Publisher(gWAP)的安全公告。该产品存在一个远程代码执行漏洞(CVE-2026-40175),源于其使用的第三方Axios HTT
CVE-2025-40949
CISA 发布 ICS 安全公告(ICSA-26-134-12),披露 Siemens Ruggedcom ROX 系列工业交换机/路由器中存在一个操作系统命令注入漏洞(CVE-2025-40949,CVSS 3.1 评分 9.1,严重)。
CVE-2025-12659
View CSAF Summary Simcenter Femap is affected by heap based buffer overflow vulnerability in Datakit library that could
CVE-2026-8153
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and
CVE-2025-40947
View CSAF Summary Ruggedcom Rox contains an input validation vulnerability in the feature key installation process that
CVE-2026-44412 · CVE-2026-44411
View CSAF Summary Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be trigge
CVE-2025-22871
View CSAF Summary The web server in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 contains a request smuggling vulnerab
CVE-2025-40948
View CSAF Summary Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remo
CVE-2026-20182
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
CVE-2025-40833
View CSAF Summary Multiple industrial devices contain a vulnerability that could allow an attacker to cause a denial of
CVE-2024-57924 · CVE-2024-47704
View CSAF Summary SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in avai
CVE-2019-14195 · CVE-2019-14193 · CVE-2022-30552 · CVE-2019-14201 · CVE-2024-57258 · CVE-2019-14192 · CVE-2019-13103 · CVE-2022-2347 · CVE-2025-9714 · CVE-2025-7425 · CVE-2025-0395 · CVE-2019-13106 · CVE-2022-34835 · CVE-2019-14202 · CVE-2019-14204 · CVE-2019-14200 · CVE-2024-57256 · CVE-2025-49796 · CVE-2019-13104 · CVE-2024-3447 · CVE-2019-14203 · CVE-2023-27043 · CVE-2019-14199 · CVE-2024-22365 · CVE-2020-10648 · CVE-2025-46836 · CVE-2019-14197 · CVE-2023-3019 · CVE-2019-14198 · CVE-2019-14196 · CVE-2022-30790 · CVE-2025-3576 · CVE-2025-49794 · CVE-2019-14194 · CVE-2025-6020
View CSAF Summary Ruggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new ve
CVE-2026-33862 · CVE-2026-33893 · CVE-2024-4367
View CSAF Summary Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromis