Vulnérabilités citées
Les CVE mentionnées dans l’actualité, avec leur gravité. Un score élevé indique une faille sérieuse, mais pas forcément exploitée.
| CVE | Score | Description | Articles |
|---|---|---|---|
| CVE-2026-33388 | 6.4 | An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user wit… | 1 |
| CVE-2026-33389 | 5.3 | An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices wit… | 1 |
| CVE-2026-33391 | 5.3 | An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user w… | 1 |
| CVE-2026-33920 | 5.1 | A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacke… | 1 |
| CVE-2026-44414 | 6.9 | A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial… | 1 |
| CVE-2026-44415 | 8.9 | Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive… | 1 |
| CVE-2026-59241 | 8.7 | A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Upda… | 1 |
| CVE-2026-63350 | 9.4 | Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who … | 1 |
| CVE-2026-63351 | 5.3 | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace pa… | 1 |
| CVE-2026-63352 | 5.3 | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attac… | 1 |
| CVE-2026-63353 | 9.4 | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an attacker to soc… | 1 |
| CVE-2026-63354 | 9.4 | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This could allow… | 1 |
| CVE-2026-63355 | 5.3 | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could all… | 1 |
| CVE-2026-63356 | 5.3 | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This… | 1 |
| CVE-2026-63357 | 5.3 | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow … | 1 |
| CVE-2026-72895 | 8.4 | A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO… | 1 |
| CVE-2026-89196 | 8.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed d… | 1 |
| CVE-2026-89197 | 8.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notific… | 1 |
| CVE-2026-89198 | 8.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uplo… | 1 |
| CVE-2026-89199 | 8.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via spe… | 1 |
| CVE-2026-89200 | 8.4 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields … | 1 |
| CVE-2026-89201 | 7.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility n… | 1 |
| CVE-2026-89202 | 7.1 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection re… | 1 |
| CVE-2026-89203 | 5.3 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing us… | 1 |
| CVE-2026-89204 | 5.3 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet mana… | 1 |
This product uses data from the NVD API but is not endorsed or certified by the NVD.