A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engineer the device's firmware, facilitating the identification of further vulnerabilities.
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control (RBAC) restrictions to be bypassed through manipulation of request data. This could allow an authenticated, low-privileged remote attacker to escalate privileges to an administrative level.
CVE-2026-62649 is a high-severity vulnerability in Siemens Reyrolle 7SR5 affecting all versions prior to 2.70. The device's web server does not properly limit system resource usage when handling many concurrent HTTP requests, allowing an unauthenticated remote attacker to cause a denial-of-service by crashing and rebooting the device.
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending additional data to it, resulting in an out-of-bounds write condition in memory. This could allow an unauthenticated remote attacker to crash the affected device, causing a reboot and resulting in a denial-of-service condition.
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers used for authentication purposes) that is not initialized with a True Random Number Generator (TRNG), resulting in a predictable sequence of generated values. This could allow an unauthenticated remote attacker to more easily predict the generated values and impersonate a legitimate authenticated user, potentially gaining unauthorized access to the device.
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an unauthenticated remote attacker to derive valid session identifiers and bypass authentication.
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.
CVE-2026-58113 is a cross-site scripting (XSS) vulnerability in Siemens Teamcenter affecting multiple versions prior to specific patch releases. The flaw occurs because user input is not properly encoded in HTML attribute contexts during the authentication redirect flow, allowing injection of arbitrary JavaScript. An unauthenticated attacker can exploit this by crafting a malicious URL that, when visited by an authenticated user, executes script in the user's browser within their Teamcenter session. This vulnerability has a medium severity rating with a CVSS score of 6.1.
A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.
A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versions), Desigo CC Flex Client V7 (All versions), Desigo CC Installed Client V6 (All versions), Desigo CC Installed Client V7 (All versions). The affected application is vulnerable to Client Code Execution (CCE) due to insufficient input validation when handling scripts embedded within user-defined graphics documents. Specifically, when the script within a graphics document is designed or modified by an attacker to include malicious commands. When a user opens a compromised graphics document, the embedded script is executed on the client application instance, allowing an attacker to write arbitrary files to the client's operating system. Successful exploitation requires an attacker to craft a malicious graphics document and entice a user with sufficient privileges to display it. This could lead to compromise of the client operating system and potential lateral movement within the organization.
A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 9.24 compatible) (All versions < V3.6.27). Affected versions of the module do not properly validate the SAML response signature. This could allow unauthenticated remote attackers to hijack an account (session) in specific SSO configurations.
CVE-2026-66155 is a high severity cross-site scripting (XSS) vulnerability in Siemens Element maps-ng versions prior to V47.12.3, V48.11.3, and V49.16.1. The vulnerability arises from improper neutralization of user-controllable input in the si-map component's points property, which is used to render tooltip labels on map pins. An attacker can craft a malicious URL that executes arbitrary script code in the victim's browser when the map pin tooltip is hovered over.
CVE-2026-54548 is a medium severity vulnerability in Siemens kas, a setup tool for bitbake-based projects. Versions prior to 5.4 improperly configure SSH by adding a global 'Host *' rule with 'StrictHostKeyChecking no' to ~/.ssh/config when no user-specific SSH configuration exists. This setting persists beyond the intended short-lived environment, causing subsequent SSH connections to accept host keys without verification. This increases the risk of man-in-the-middle attacks compromising session confidentiality and integrity. The issue is fixed in kas version 5.4.
CVE-2026-47192 is a medium severity vulnerability in Siemens kas, a setup tool for bitbake-based projects. Versions from 4.8 up to but not including 5.3 improperly verify cryptographic signatures by processing repositories before validating their signatures. Under specific conditions involving repository control, configuration includes, and key management, an attacker could replace a legitimate repository with a malicious one. The issue is fixed in kas version 5.3. A workaround involves pinning the expected signature key via its fingerprint.
CVE-2026-47191 is a vulnerability in Siemens kas, a setup tool for bitbake-based projects, affecting versions prior to 5.3. The issue involves improper verification of cryptographic signatures when relying solely on git commit IDs (SHA-1 or SHA-256) to validate repository state. This can allow an attacker who controls the repository to trick users into checking out malicious branches with the same name. The vulnerability primarily impacts SHA-256 commit IDs due to the possibility of hash collisions with SHA-1. Version 5.3 addresses this issue. Workarounds include avoiding sole reliance on commit IDs, validating cryptographically signed commits or tags, or using mirrored repositories with verified integrity.
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to full system compromise.
A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.