Threats tagged 'mettler-toledo-gmbh'

A critical vulnerability identified as CVE-2026-109618 affects the Octo Image Server component of METTLER TOLEDO products, specifically versions up to 5.0.10. The vulnerability involves a PHP2Shell issue, which could potentially allow unauthorized code execution. Although the product is typically deployed within internal networks and not exposed directly to the internet, updating the PHP package to version 8.2.35 is recommended to mitigate any potential risk and align with cybersecurity best practices.

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.