Advisories › Siemens › ICSA-26-295-16

Siemens SIMATIC S7-1500 TM MFP: 377 CVEs, Critical 10.0

Critical 10.0 Known exploited Oil & gas relevant ICSA-26-295-16 · Published Oct 22, 2026

Summary

CISA reports 377 vulnerabilities in Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem. Weakness types: Improper Input Validation, NULL Pointer Dereference, Out-of-bounds Read (+43 more). Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available. Highest CVSS v3 score: 10.0 (Critical), exploitable over the network. At least one CVE is on CISA's Known Exploited Vulnerabilities list.

What to do: Act now: Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only. The vendor lists no fix for some issues, so lean on mitigations.
Why this matters for oil & gas: Siemens (SIMATIC S7, PCS 7, WinCC, RUGGEDCOM) is widely used in process plants and pipelines; Affected products include SIMATIC S7.

At a glance

Vendor
Siemens
Products
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
CVEs
CVE-2023-52927, CVE-2023-53292, CVE-2023-54271, CVE-2024-26982, CVE-2024-36922, CVE-2024-40945, CVE-2024-47809, CVE-2024-49998, CVE-2024-53166, CVE-2024-56647, CVE-2024-56657, CVE-2024-56719, CVE-2024-57977, CVE-2024-57979, CVE-2024-57980, CVE-2024-57981, CVE-2024-57986, CVE-2024-57993, CVE-2024-57996, CVE-2024-58002, CVE-2024-58005, CVE-2024-58009, CVE-2024-58013, CVE-2024-58014, CVE-2024-58017, CVE-2024-58020, CVE-2024-58058, CVE-2024-58061, CVE-2024-58063, CVE-2024-58068, CVE-2024-58071, CVE-2024-58072, CVE-2024-58077, CVE-2024-58079, CVE-2024-58083, CVE-2025-21682, CVE-2025-21700, CVE-2025-21702, CVE-2025-21703, CVE-2025-21704, CVE-2025-21705, CVE-2025-21706, CVE-2025-21707, CVE-2025-21708, CVE-2025-21716, CVE-2025-21719, CVE-2025-21724, CVE-2025-21725, CVE-2025-21726, CVE-2025-21727, CVE-2025-21728, CVE-2025-21731, CVE-2025-21735, CVE-2025-21738, CVE-2025-21744, CVE-2025-21745, CVE-2025-21753, CVE-2025-21756, CVE-2025-21758, CVE-2025-21760, CVE-2025-21761, CVE-2025-21762, CVE-2025-21763, CVE-2025-21764, CVE-2025-21765, CVE-2025-21766, CVE-2025-21767, CVE-2025-21776, CVE-2025-21779, CVE-2025-21787, CVE-2025-21790, CVE-2025-21791, CVE-2025-21795, CVE-2025-21796, CVE-2025-21806, CVE-2025-21814, CVE-2025-21830, CVE-2025-21832, CVE-2025-21835, CVE-2025-21838, CVE-2025-21844, CVE-2025-21846, CVE-2025-21858, CVE-2025-21859, CVE-2025-21862, CVE-2025-21863, CVE-2025-21864, CVE-2025-21865, CVE-2025-22105, CVE-2025-23131, CVE-2025-38105, CVE-2025-38162, CVE-2025-38192, CVE-2025-38250, CVE-2025-38584, CVE-2025-38704, CVE-2025-39748, CVE-2025-39863, CVE-2025-39997, CVE-2025-40135, CVE-2025-68206, CVE-2025-68239, CVE-2025-68265, CVE-2026-23066, CVE-2026-23100, CVE-2026-23113, CVE-2026-23141, CVE-2026-23154, CVE-2026-23157, CVE-2026-23204, CVE-2026-23231, CVE-2026-23245, CVE-2026-23253, CVE-2026-23255, CVE-2026-23270, CVE-2026-23271, CVE-2026-23272, CVE-2026-23273, CVE-2026-23274, CVE-2026-23277, CVE-2026-23278, CVE-2026-23279, CVE-2026-23281, CVE-2026-23290, CVE-2026-23291, CVE-2026-23292, CVE-2026-23296, CVE-2026-23300, CVE-2026-23302, CVE-2026-23303, CVE-2026-23304, CVE-2026-23310, CVE-2026-23312, CVE-2026-23315, CVE-2026-23317, CVE-2026-23318, CVE-2026-23319, CVE-2026-23321, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340, CVE-2026-23343, CVE-2026-23351, CVE-2026-23352, CVE-2026-23356, CVE-2026-23357, CVE-2026-23359, CVE-2026-23364, CVE-2026-23365, CVE-2026-23367, CVE-2026-23368, CVE-2026-23370, CVE-2026-23372, CVE-2026-23378, CVE-2026-23379, CVE-2026-23381, CVE-2026-23382, CVE-2026-23388, CVE-2026-23389, CVE-2026-23391, CVE-2026-23392, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397, CVE-2026-23398, CVE-2026-23399, CVE-2026-23442, CVE-2026-23444, CVE-2026-31407, CVE-2026-31449, CVE-2026-31451, CVE-2026-31488, CVE-2026-31500, CVE-2026-31532, CVE-2026-31580, CVE-2026-31583, CVE-2026-31586, CVE-2026-31611, CVE-2026-31612, CVE-2026-31613, CVE-2026-31617, CVE-2026-31622, CVE-2026-31624, CVE-2026-31625, CVE-2026-31629, CVE-2026-31630, CVE-2026-31637, CVE-2026-31642, CVE-2026-31673, CVE-2026-31676, CVE-2026-31681, CVE-2026-31685, CVE-2026-31694, CVE-2026-31696, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31704, CVE-2026-31705, CVE-2026-31708, CVE-2026-31709, CVE-2026-31711, CVE-2026-31712, CVE-2026-43052, CVE-2026-43071, CVE-2026-43074, CVE-2026-43080, CVE-2026-43085, CVE-2026-43089, CVE-2026-43093, CVE-2026-43094, CVE-2026-43099, CVE-2026-43110, CVE-2026-43111, CVE-2026-43112, CVE-2026-43114, CVE-2026-43116, CVE-2026-43117, CVE-2026-43303, CVE-2026-43350, CVE-2026-43421, CVE-2026-43492, CVE-2026-43493, CVE-2026-43496, CVE-2026-43499, CVE-2026-43502, CVE-2026-43503, CVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844, CVE-2026-45850, CVE-2026-45991, CVE-2026-45997, CVE-2026-46003, CVE-2026-46015, CVE-2026-46018, CVE-2026-46021, CVE-2026-46022, CVE-2026-46023, CVE-2026-46026, CVE-2026-46033, CVE-2026-46037, CVE-2026-46038, CVE-2026-46040, CVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46050, CVE-2026-46051, CVE-2026-46056, CVE-2026-46064, CVE-2026-46065, CVE-2026-46069, CVE-2026-46070, CVE-2026-46083, CVE-2026-46086, CVE-2026-46088, CVE-2026-46092, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46107, CVE-2026-46110, CVE-2026-46113, CVE-2026-46116, CVE-2026-46120, CVE-2026-46122, CVE-2026-46124, CVE-2026-46125, CVE-2026-46128, CVE-2026-46136, CVE-2026-46137, CVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46159, CVE-2026-46161, CVE-2026-46163, CVE-2026-46165, CVE-2026-46167, CVE-2026-46168, CVE-2026-46172, CVE-2026-46173, CVE-2026-46177, CVE-2026-46180, CVE-2026-46185, CVE-2026-46187, CVE-2026-46190, CVE-2026-46191, CVE-2026-46193, CVE-2026-46195, CVE-2026-46196, CVE-2026-46209, CVE-2026-46214, CVE-2026-46227, CVE-2026-46234, CVE-2026-46243, CVE-2026-46275, CVE-2026-46294, CVE-2026-46303, CVE-2026-46304, CVE-2026-46306, CVE-2026-46307, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322, CVE-2026-46323, CVE-2026-46331, CVE-2026-52909, CVE-2026-52910, CVE-2026-52917, CVE-2026-52918, CVE-2026-52923, CVE-2026-52928, CVE-2026-52929, CVE-2026-52930, CVE-2026-52942, CVE-2026-52943, CVE-2026-52946, CVE-2026-52947, CVE-2026-52948, CVE-2026-53080, CVE-2026-53131, CVE-2026-53146, CVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150, CVE-2026-53167, CVE-2026-53168, CVE-2026-53177, CVE-2026-53181, CVE-2026-53183, CVE-2026-53184, CVE-2026-53192, CVE-2026-53198, CVE-2026-53208, CVE-2026-53212, CVE-2026-53218, CVE-2026-53219, CVE-2026-53221, CVE-2026-53225, CVE-2026-53227, CVE-2026-53228, CVE-2026-53236, CVE-2026-53239, CVE-2026-53242, CVE-2026-53245, CVE-2026-53249, CVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256, CVE-2026-53263, CVE-2026-53264, CVE-2026-53265, CVE-2026-53268, CVE-2026-53269, CVE-2026-53275, CVE-2026-53325, CVE-2026-53337, CVE-2026-53349, CVE-2026-53350, CVE-2026-53352, CVE-2026-53356, CVE-2026-53358, CVE-2026-53362, CVE-2026-64560
Highest CVSS v3
10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Highest CVSS v4
–
Known exploited (KEV)
Yes
Sectors (per CISA)
Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities
Deployed
Worldwide
Vendor HQ
Germany

Vulnerabilities

CVEWeaknessCVSS v3CVSS v4KEVDescription (from advisory)
CVE-2023-52927Improper Input Validation7.8–NoCVE-2023-52927
CVE-2023-53292NULL Pointer Dereference5.5–NoCVE-2023-53292
CVE-2023-54271Improper Input Validation0.0–NoCVE-2023-54271
CVE-2024-26982Out-of-bounds Read7.1–NoCVE-2024-26982
CVE-2024-36922Improper Input Validation8.8–NoCVE-2024-36922
CVE-2024-40945Return of Wrong Status Code6.8–NoCVE-2024-40945
CVE-2024-47809NULL Pointer Dereference5.5–NoCVE-2024-47809
CVE-2024-49998NULL Pointer Dereference4.7–NoCVE-2024-49998
CVE-2024-53166Use After Free7.8–NoCVE-2024-53166
CVE-2024-56647Improper Input Validation5.5–NoCVE-2024-56647
CVE-2024-56657Improper Input Validation5.5–NoCVE-2024-56657
CVE-2024-56719Improper Input Validation10.0–NoCVE-2024-56719
CVE-2024-57977Improper Locking5.5–NoCVE-2024-57977
CVE-2024-57979Use After Free7.8–NoCVE-2024-57979
CVE-2024-57980Double Free4.7–NoCVE-2024-57980
CVE-2024-57981NULL Pointer Dereference5.5–NoCVE-2024-57981
CVE-2024-57986Improper Input Validation7.1–NoCVE-2024-57986
CVE-2024-57993Improper Input Validation5.5–NoCVE-2024-57993
CVE-2024-57996Improper Validation of Array Index7.8–NoCVE-2024-57996
CVE-2024-58002Use After Free7.8–NoCVE-2024-58002
CVE-2024-58005Improper Control of Resource Identifiers ('Resource Injection')5.5–NoCVE-2024-58005
CVE-2024-58009Improper Input Validation5.5–NoCVE-2024-58009
CVE-2024-58013Use After Free7.8–NoCVE-2024-58013
CVE-2024-58014Improper Input Validation6.0–NoCVE-2024-58014
CVE-2024-58017Integer Overflow or Wraparound5.5–NoCVE-2024-58017
CVE-2024-58020NULL Pointer Dereference5.5–NoCVE-2024-58020
CVE-2024-58058NULL Pointer Dereference5.5–NoCVE-2024-58058
CVE-2024-58061Improper Input Validation5.5–NoCVE-2024-58061
CVE-2024-58063Missing Release of Memory after Effective Lifetime5.5–NoCVE-2024-58063
CVE-2024-58068NULL Pointer Dereference5.5–NoCVE-2024-58068
CVE-2024-58071Improper Locking5.5–NoCVE-2024-58071
CVE-2024-58072Use After Free6.4–NoCVE-2024-58072
CVE-2024-58077Improper Input Validation5.5–NoCVE-2024-58077
CVE-2024-58079Improper Input Validation7.8–NoCVE-2024-58079
CVE-2024-58083Use After Free7.8–NoCVE-2024-58083
CVE-2025-21682NULL Pointer Dereference7.3–NoCVE-2025-21682
CVE-2025-21700Use After Free7.8–NoCVE-2025-21700
CVE-2025-21702Improper Input Validation7.8–NoCVE-2025-21702
CVE-2025-21703Use After Free7.8–NoCVE-2025-21703
CVE-2025-21704Improper Handling of Length Parameter Inconsistency4.4–NoCVE-2025-21704
CVE-2025-21705Improper Input Validation5.5–NoCVE-2025-21705
CVE-2025-21706Improper Input Validation5.5–NoCVE-2025-21706
CVE-2025-21707Use of Uninitialized Resource9.8–NoCVE-2025-21707
CVE-2025-21708Improper Input Validation5.5–NoCVE-2025-21708
CVE-2025-21716Use of Uninitialized Resource5.5–NoCVE-2025-21716
CVE-2025-21719Improper Input Validation7.1–NoCVE-2025-21719
CVE-2025-21724Improper Input Validation5.5–NoCVE-2025-21724
CVE-2025-21725Improper Input Validation7.5–NoCVE-2025-21725
CVE-2025-21726Use After Free7.8–NoCVE-2025-21726
CVE-2025-21727Use After Free7.8–NoCVE-2025-21727
CVE-2025-21728Improper Input Validation5.5–NoCVE-2025-21728
CVE-2025-21731Use After Free7.8–NoCVE-2025-21731
CVE-2025-21735Out-of-bounds Write8.8–NoCVE-2025-21735
CVE-2025-21738Improper Restriction of Operations within the Bounds of a Memory Buffer7.8–NoCVE-2025-21738
CVE-2025-21744NULL Pointer Dereference5.5–NoCVE-2025-21744
CVE-2025-21745Missing Release of Memory after Effective Lifetime5.5–NoCVE-2025-21745
CVE-2025-21753Use After Free7.8–NoCVE-2025-21753
CVE-2025-21756Use After Free7.8–NoCVE-2025-21756
CVE-2025-21758Improper Input Validation7.8–NoCVE-2025-21758
CVE-2025-21760Use After Free8.1–NoCVE-2025-21760
CVE-2025-21761Use After Free7.8–NoCVE-2025-21761
CVE-2025-21762Use After Free8.1–NoCVE-2025-21762
CVE-2025-21763Use After Free7.8–NoCVE-2025-21763
CVE-2025-21764Use After Free7.8–NoCVE-2025-21764
CVE-2025-21765Improper Input Validation8.1–NoCVE-2025-21765
CVE-2025-21766Improper Input Validation8.1–NoCVE-2025-21766
CVE-2025-21767Improper Input Validation5.5–NoCVE-2025-21767
CVE-2025-21776NULL Pointer Dereference4.4–NoCVE-2025-21776
CVE-2025-21779NULL Pointer Dereference5.5–NoCVE-2025-21779
CVE-2025-21787Use of Uninitialized Resource5.5–NoCVE-2025-21787
CVE-2025-21790NULL Pointer Dereference5.5–NoCVE-2025-21790
CVE-2025-21791Use After Free7.8–NoCVE-2025-21791
CVE-2025-21795Improper Input Validation7.5–NoCVE-2025-21795
CVE-2025-21796Use After Free9.8–NoCVE-2025-21796
CVE-2025-21806Improper Input Validation5.5–NoCVE-2025-21806
CVE-2025-21814NULL Pointer Dereference5.5–NoCVE-2025-21814
CVE-2025-21830Improper Input Validation7.3–NoCVE-2025-21830
CVE-2025-21832Unchecked Return Value7.8–NoCVE-2025-21832
CVE-2025-21835Improper Input Validation5.5–NoCVE-2025-21835
CVE-2025-21838Use After Free6.0–NoCVE-2025-21838
CVE-2025-21844NULL Pointer Dereference7.5–NoCVE-2025-21844
CVE-2025-21846NULL Pointer Dereference5.5–NoCVE-2025-21846
CVE-2025-21858Use After Free7.8–NoCVE-2025-21858
CVE-2025-21859Improper Locking5.5–NoCVE-2025-21859
CVE-2025-21862Use of Uninitialized Resource5.5–NoCVE-2025-21862
CVE-2025-21863Improper Input Validation7.8–NoCVE-2025-21863
CVE-2025-21864NULL Pointer Dereference7.8–NoCVE-2025-21864
CVE-2025-21865Out-of-bounds Write5.5–NoCVE-2025-21865
CVE-2025-22105Improper Input Validation0.0–NoCVE-2025-22105
CVE-2025-23131Improper Input Validation0.0–NoCVE-2025-23131
CVE-2025-38105Improper Input Validation7.0–NoCVE-2025-38105
CVE-2025-38162Improper Input Validation7.8–NoCVE-2025-38162
CVE-2025-38192Improper Input Validation7.8–NoCVE-2025-38192
CVE-2025-38250Improper Input Validation7.8–NoCVE-2025-38250
CVE-2025-38584Improper Input Validation7.0–NoCVE-2025-38584
CVE-2025-38704Improper Input Validation5.5–NoCVE-2025-38704
CVE-2025-39748Missing Default Case in Multiple Condition Expression5.5–NoCVE-2025-39748
CVE-2025-39863Use After Free7.8–NoCVE-2025-39863
CVE-2025-39997Improper Input Validation0.0–NoCVE-2025-39997
CVE-2025-40135Expired Pointer Dereference8.1–NoCVE-2025-40135
CVE-2025-68206Improper Handling of Missing Special Element7.5–NoCVE-2025-68206
CVE-2025-68239Missing Release of Resource after Effective Lifetime4.7–NoCVE-2025-68239
CVE-2025-68265Expired Pointer Dereference7.8–NoCVE-2025-68265
CVE-2026-23066Improper Input Validation7.8–NoCVE-2026-23066
CVE-2026-23100Improper Input Validation5.5–NoCVE-2026-23100
CVE-2026-23113Loop with Unreachable Exit Condition ('Infinite Loop')5.5–NoCVE-2026-23113
CVE-2026-23141Out-of-bounds Read5.5–NoCVE-2026-23141
CVE-2026-23154Improper Handling of Structural Elements3.3–NoCVE-2026-23154
CVE-2026-23157Deadlock5.5–NoCVE-2026-23157
CVE-2026-23204Improper Validation of Specified Index, Position, or Offset in Input7.1–NoCVE-2026-23204
CVE-2026-23231Use After Free7.8–NoCVE-2026-23231
CVE-2026-23245Improper Input Validation7.8–NoCVE-2026-23245
CVE-2026-23253Improper Control of a Resource Through its Lifetime7.8–NoCVE-2026-23253
CVE-2026-23255Improper Input Validation0.0–NoCVE-2026-23255
CVE-2026-23270Use After Free7.8–NoCVE-2026-23270
CVE-2026-23271Operation on a Resource after Expiration or Release7.8–NoCVE-2026-23271
CVE-2026-23272Improper Input Validation7.8–NoCVE-2026-23272
CVE-2026-23273Signal Handler Race Condition7.8–NoCVE-2026-23273
CVE-2026-23274Use of Uninitialized Resource7.8–NoCVE-2026-23274
CVE-2026-23277NULL Pointer Dereference5.9–NoCVE-2026-23277
CVE-2026-23278Improper Input Validation7.8–NoCVE-2026-23278
CVE-2026-23279NULL Pointer Dereference5.5–NoCVE-2026-23279
CVE-2026-23281Incorrect Synchronization6.3–NoCVE-2026-23281
CVE-2026-23290Missing Initialization of Resource5.5–NoCVE-2026-23290
CVE-2026-23291Improper Input Validation5.5–NoCVE-2026-23291
CVE-2026-23292Multiple Locks of a Critical Resource4.4–NoCVE-2026-23292
CVE-2026-23296Improper Update of Reference Count5.5–NoCVE-2026-23296
CVE-2026-23300Missing Initialization of Resource7.0–NoCVE-2026-23300
CVE-2026-23302Improper Input Validation0.0–NoCVE-2026-23302
CVE-2026-23303Plaintext Storage of a Password5.5–NoCVE-2026-23303
CVE-2026-23304NULL Pointer Dereference4.7–NoCVE-2026-23304
CVE-2026-23310Improper Input Validation0.0–NoCVE-2026-23310
CVE-2026-23312Improper Input Validation5.5–NoCVE-2026-23312
CVE-2026-23315Improper Input Validation7.1–NoCVE-2026-23315
CVE-2026-23317Detection of Error Condition Without Action7.8–NoCVE-2026-23317
CVE-2026-23318Improper Validation of Specified Type of Input6.6–NoCVE-2026-23318
CVE-2026-23319Expired Pointer Dereference6.4–NoCVE-2026-23319
CVE-2026-23321Improper Update of Reference Count3.3–NoCVE-2026-23321
CVE-2026-23336Improper Input Validation7.8–NoCVE-2026-23336
CVE-2026-23339Missing Release of Resource after Effective Lifetime5.5–NoCVE-2026-23339
CVE-2026-23340Signal Handler Race Condition7.8–NoCVE-2026-23340
CVE-2026-23343Integer Overflow or Wraparound5.5–NoCVE-2026-23343
CVE-2026-23351Expired Pointer Dereference7.8–NoCVE-2026-23351
CVE-2026-23352Release of Invalid Pointer or Reference5.5–NoCVE-2026-23352
CVE-2026-23356Improper Resource Locking5.5–NoCVE-2026-23356
CVE-2026-23357Deadlock5.5–NoCVE-2026-23357
CVE-2026-23359Out-of-bounds Write5.5–NoCVE-2026-23359
CVE-2026-23364Improper Input Validation7.4–NoCVE-2026-23364
CVE-2026-23365Improper Validation of Specified Type of Input5.5–NoCVE-2026-23365
CVE-2026-23367Access of Uninitialized Pointer5.5–NoCVE-2026-23367
CVE-2026-23368Improper Input Validation5.5–NoCVE-2026-23368
CVE-2026-23370Plaintext Storage of a Password7.1–NoCVE-2026-23370
CVE-2026-23372Signal Handler Race Condition7.8–NoCVE-2026-23372
CVE-2026-23378Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')7.8–NoCVE-2026-23378
CVE-2026-23379Integer Overflow or Wraparound5.5–NoCVE-2026-23379
CVE-2026-23381Access of Uninitialized Pointer5.5–NoCVE-2026-23381
CVE-2026-23382Missing Lock Check5.5–NoCVE-2026-23382
CVE-2026-23388Improper Validation of Specified Index, Position, or Offset in Input7.0–NoCVE-2026-23388
CVE-2026-23389Improper Input Validation0.0–NoCVE-2026-23389
CVE-2026-23391Improper Update of Reference Count7.8–NoCVE-2026-23391
CVE-2026-23392Expired Pointer Dereference7.8–NoCVE-2026-23392
CVE-2026-23395Integer Overflow or Wraparound8.8–NoCVE-2026-23395
CVE-2026-23396NULL Pointer Dereference5.5–NoCVE-2026-23396
CVE-2026-23397Improper Handling of Length Parameter Inconsistency4.4–NoCVE-2026-23397
CVE-2026-23398NULL Pointer Dereference5.9–NoCVE-2026-23398
CVE-2026-23399Improper Input Validation0.0–NoCVE-2026-23399
CVE-2026-23442Improper Input Validation0.0–NoCVE-2026-23442
CVE-2026-23444Improper Input Validation7.8–NoCVE-2026-23444
CVE-2026-31407Improper Input Validation7.1–NoCVE-2026-31407
CVE-2026-31449Improper Input Validation7.8–NoCVE-2026-31449
CVE-2026-31451Improper Input Validation0.0–NoCVE-2026-31451
CVE-2026-31488Improper Validation of Consistency within Input7.8–NoCVE-2026-31488
CVE-2026-31500Improper Input Validation0.0–NoCVE-2026-31500
CVE-2026-31532Improper Input Validation7.8–NoCVE-2026-31532
CVE-2026-31580Improper Input Validation0.0–NoCVE-2026-31580
CVE-2026-31583Improper Input Validation0.0–NoCVE-2026-31583
CVE-2026-31586Improper Input Validation7.8–NoCVE-2026-31586
CVE-2026-31611Improper Input Validation8.6–NoCVE-2026-31611
CVE-2026-31612Improper Input Validation7.5–NoCVE-2026-31612
CVE-2026-31613Improper Input Validation8.1–NoCVE-2026-31613
CVE-2026-31617Integer Underflow (Wrap or Wraparound)5.5–NoCVE-2026-31617
CVE-2026-31622Improper Input Validation8.8–NoCVE-2026-31622
CVE-2026-31624Improper Input Validation0.0–NoCVE-2026-31624
CVE-2026-31625Improper Input Validation0.0–NoCVE-2026-31625
CVE-2026-31629Improper Input Validation8.8–NoCVE-2026-31629
CVE-2026-31630Improper Input Validation7.8–NoCVE-2026-31630
CVE-2026-31637Improper Input Validation9.8–NoCVE-2026-31637
CVE-2026-31642Improper Input Validation0.0–NoCVE-2026-31642
CVE-2026-31673Improper Input Validation7.8–NoCVE-2026-31673
CVE-2026-31676Improper Input Validation7.5–NoCVE-2026-31676
CVE-2026-31681Improper Input Validation0.0–NoCVE-2026-31681
CVE-2026-31685Improper Input Validation9.4–NoCVE-2026-31685
CVE-2026-31694Improper Input Validation7.8–NoCVE-2026-31694
CVE-2026-31696Improper Input Validation0.0–NoCVE-2026-31696
CVE-2026-31697Improper Input Validation7.1–NoCVE-2026-31697
CVE-2026-31698Improper Input Validation7.1–NoCVE-2026-31698
CVE-2026-31699Improper Input Validation7.1–NoCVE-2026-31699
CVE-2026-31700Improper Input Validation7.8–NoCVE-2026-31700
CVE-2026-31704Improper Input Validation0.0–NoCVE-2026-31704
CVE-2026-31705Improper Input Validation9.8–NoCVE-2026-31705
CVE-2026-31708Improper Input Validation8.1–NoCVE-2026-31708
CVE-2026-31709Improper Validation of Consistency within Input8.8–NoCVE-2026-31709
CVE-2026-31711Improper Input Validation7.5–NoCVE-2026-31711
CVE-2026-31712Improper Input Validation8.3–NoCVE-2026-31712
CVE-2026-43052Improper Input Validation0.0–NoCVE-2026-43052
CVE-2026-43071Improper Input Validation9.1–NoCVE-2026-43071
CVE-2026-43074Improper Input Validation7.8–NoCVE-2026-43074
CVE-2026-43080Improper Input Validation0.0–NoCVE-2026-43080
CVE-2026-43085Improper Input Validation0.0–NoCVE-2026-43085
CVE-2026-43089Improper Input Validation0.0–NoCVE-2026-43089
CVE-2026-43093Improper Input Validation7.8–NoCVE-2026-43093
CVE-2026-43094Improper Input Validation0.0–NoCVE-2026-43094
CVE-2026-43099Improper Input Validation7.5–NoCVE-2026-43099
CVE-2026-43110Improper Input Validation8.8–NoCVE-2026-43110
CVE-2026-43111Improper Input Validation7.8–NoCVE-2026-43111
CVE-2026-43112Out-of-bounds Read8.8–NoCVE-2026-43112
CVE-2026-43114Use of Incorrect Operator9.4–NoCVE-2026-43114
CVE-2026-43116Improper Input Validation7.8–NoCVE-2026-43116
CVE-2026-43117Improper Input Validation9.1–NoCVE-2026-43117
CVE-2026-43303Improper Input Validation7.8–NoCVE-2026-43303
CVE-2026-43350Improper Input Validation7.6–NoCVE-2026-43350
CVE-2026-43421Improper Input Validation0.0–NoCVE-2026-43421
CVE-2026-43492Improper Input Validation0.0–NoCVE-2026-43492
CVE-2026-43493Improper Input Validation9.8–NoCVE-2026-43493
CVE-2026-43496Improper Input Validation0.0–NoCVE-2026-43496
CVE-2026-43499Use After Free7.8–NoCVE-2026-43499
CVE-2026-43502Missing Release of Memory after Effective Lifetime7.8–NoCVE-2026-43502
CVE-2026-43503Improper Control of a Resource Through its Lifetime8.8–NoCVE-2026-43503
CVE-2026-45834Improper Input Validation0.0–NoCVE-2026-45834
CVE-2026-45835Improper Input Validation0.0–NoCVE-2026-45835
CVE-2026-45836Improper Input Validation0.0–NoCVE-2026-45836
CVE-2026-45838Improper Input Validation0.0–NoCVE-2026-45838
CVE-2026-45839Improper Input Validation0.0–NoCVE-2026-45839
CVE-2026-45840Improper Input Validation0.0–NoCVE-2026-45840
CVE-2026-45841Improper Input Validation0.0–NoCVE-2026-45841
CVE-2026-45842Improper Input Validation0.0–NoCVE-2026-45842
CVE-2026-45843Improper Input Validation8.2–NoCVE-2026-45843
CVE-2026-45844Improper Input Validation0.0–NoCVE-2026-45844
CVE-2026-45850Improper Input Validation0.0–NoCVE-2026-45850
CVE-2026-45991Improper Input Validation7.8–NoCVE-2026-45991
CVE-2026-45997Improper Input Validation0.0–NoCVE-2026-45997
CVE-2026-46003Improper Input Validation0.0–NoCVE-2026-46003
CVE-2026-46015Improper Input Validation7.8–NoCVE-2026-46015
CVE-2026-46018Improper Input Validation0.0–NoCVE-2026-46018
CVE-2026-46021Improper Input Validation0.0–NoCVE-2026-46021
CVE-2026-46022Improper Input Validation0.0–NoCVE-2026-46022
CVE-2026-46023Improper Input Validation0.0–NoCVE-2026-46023
CVE-2026-46026Improper Input Validation0.0–NoCVE-2026-46026
CVE-2026-46033Improper Validation of Specified Quantity in Input7.1–NoCVE-2026-46033
CVE-2026-46037Improper Input Validation8.2–NoCVE-2026-46037
CVE-2026-46038Improper Input Validation0.0–NoCVE-2026-46038
CVE-2026-46040Improper Input Validation0.0–NoCVE-2026-46040
CVE-2026-46044Improper Input Validation0.0–NoCVE-2026-46044
CVE-2026-46046Improper Input Validation0.0–NoCVE-2026-46046
CVE-2026-46047Improper Input Validation0.0–NoCVE-2026-46047
CVE-2026-46050Improper Input Validation0.0–NoCVE-2026-46050
CVE-2026-46051Improper Input Validation0.0–NoCVE-2026-46051
CVE-2026-46056Improper Input Validation8.8–NoCVE-2026-46056
CVE-2026-46064Improper Input Validation0.0–NoCVE-2026-46064
CVE-2026-46065Improper Input Validation7.8–NoCVE-2026-46065
CVE-2026-46069Improper Input Validation0.0–NoCVE-2026-46069
CVE-2026-46070Improper Input Validation7.1–NoCVE-2026-46070
CVE-2026-46083Improper Input Validation0.0–NoCVE-2026-46083
CVE-2026-46086Improper Input Validation0.0–NoCVE-2026-46086
CVE-2026-46088Improper Input Validation0.0–NoCVE-2026-46088
CVE-2026-46092Improper Input Validation0.0–NoCVE-2026-46092
CVE-2026-46099Improper Update of Reference Count8.1–NoCVE-2026-46099
CVE-2026-46101Improper Input Validation0.0–NoCVE-2026-46101
CVE-2026-46102Improper Input Validation7.5–NoCVE-2026-46102
CVE-2026-46107Improper Input Validation7.8–NoCVE-2026-46107
CVE-2026-46110Improper Input Validation7.5–NoCVE-2026-46110
CVE-2026-46113Improper Input Validation8.8–NoCVE-2026-46113
CVE-2026-46116Release of Invalid Pointer or Reference7.8–NoCVE-2026-46116
CVE-2026-46120Improper Input Validation7.8–NoCVE-2026-46120
CVE-2026-46122Improper Input Validation0.0–NoCVE-2026-46122
CVE-2026-46124Improper Input Validation7.5–NoCVE-2026-46124
CVE-2026-46125Expired Pointer Dereference8.8–NoCVE-2026-46125
CVE-2026-46128Improper Input Validation0.0–NoCVE-2026-46128
CVE-2026-46136Improper Input Validation0.0–NoCVE-2026-46136
CVE-2026-46137Improper Input Validation9.8–NoCVE-2026-46137
CVE-2026-46146Improper Input Validation0.0–NoCVE-2026-46146
CVE-2026-46149Improper Input Validation7.1–NoCVE-2026-46149
CVE-2026-46150Improper Input Validation7.1–NoCVE-2026-46150
CVE-2026-46151Improper Input Validation0.0–NoCVE-2026-46151
CVE-2026-46159Improper Input Validation0.0–NoCVE-2026-46159
CVE-2026-46161Improper Input Validation0.0–NoCVE-2026-46161
CVE-2026-46163Improper Input Validation0.0–NoCVE-2026-46163
CVE-2026-46165Improper Input Validation0.0–NoCVE-2026-46165
CVE-2026-46167Improper Input Validation0.0–NoCVE-2026-46167
CVE-2026-46168Improper Input Validation0.0–NoCVE-2026-46168
CVE-2026-46172Improper Input Validation0.0–NoCVE-2026-46172
CVE-2026-46173Improper Input Validation7.8–NoCVE-2026-46173
CVE-2026-46177Improper Input Validation7.5–NoCVE-2026-46177
CVE-2026-46180Improper Input Validation0.0–NoCVE-2026-46180
CVE-2026-46185Improper Input Validation9.1–NoCVE-2026-46185
CVE-2026-46187Improper Input Validation0.0–NoCVE-2026-46187
CVE-2026-46190Improper Input Validation7.1–NoCVE-2026-46190
CVE-2026-46191Improper Input Validation0.0–NoCVE-2026-46191
CVE-2026-46193Improper Input Validation0.0–NoCVE-2026-46193
CVE-2026-46195Out-of-bounds Write9.8–NoCVE-2026-46195
CVE-2026-46196Improper Input Validation0.0–NoCVE-2026-46196
CVE-2026-46209Improper Input Validation7.8–NoCVE-2026-46209
CVE-2026-46214Improper Input Validation0.0–NoCVE-2026-46214
CVE-2026-46227Time-of-check Time-of-use (TOCTOU) Race Condition7.8–NoCVE-2026-46227
CVE-2026-46234Improper Input Validation0.0–NoCVE-2026-46234
CVE-2026-46243Improper Input Validation7.1–NoCVE-2026-46243
CVE-2026-46275Improper Input Validation7.8–NoCVE-2026-46275
CVE-2026-46294Improper Input Validation0.0–NoCVE-2026-46294
CVE-2026-46303Improper Input Validation8.2–NoCVE-2026-46303
CVE-2026-46304Improper Input Validation7.5–NoCVE-2026-46304
CVE-2026-46306Improper Input Validation7.5–NoCVE-2026-46306
CVE-2026-46307Improper Input Validation8.3–NoCVE-2026-46307
CVE-2026-46320Improper Input Validation7.4–NoCVE-2026-46320
CVE-2026-46321Improper Input Validation7.1–NoCVE-2026-46321
CVE-2026-46322Improper Input Validation7.1–NoCVE-2026-46322
CVE-2026-46323Write-what-where Condition7.8–NoCVE-2026-46323
CVE-2026-46331Out-of-bounds Write7.8–NoCVE-2026-46331
CVE-2026-52909Improper Input Validation7.8–NoCVE-2026-52909
CVE-2026-52910Signal Handler Race Condition7.8–NoCVE-2026-52910
CVE-2026-52917Improper Input Validation7.1–NoCVE-2026-52917
CVE-2026-52918Improper Input Validation8.8–NoCVE-2026-52918
CVE-2026-52923Expired Pointer Dereference7.8–NoCVE-2026-52923
CVE-2026-52928Improper Input Validation0.0–NoCVE-2026-52928
CVE-2026-52929Improper Input Validation7.5–NoCVE-2026-52929
CVE-2026-52930Improper Input Validation0.0–NoCVE-2026-52930
CVE-2026-52942Improper Input Validation7.1–NoCVE-2026-52942
CVE-2026-52943Improper Update of Reference Count7.8–NoCVE-2026-52943
CVE-2026-52946Improper Input Validation7.5–NoCVE-2026-52946
CVE-2026-52947Improper Input Validation7.8–NoCVE-2026-52947
CVE-2026-52948Improper Input Validation0.0–NoCVE-2026-52948
CVE-2026-53080Improper Input Validation0.0–NoCVE-2026-53080
CVE-2026-53131Improper Input Validation9.4–NoCVE-2026-53131
CVE-2026-53146Improper Input Validation7.1–NoCVE-2026-53146
CVE-2026-53147Improper Input Validation8.1–NoCVE-2026-53147
CVE-2026-53148Out-of-bounds Write7.0–NoCVE-2026-53148
CVE-2026-53149Improper Input Validation0.0–NoCVE-2026-53149
CVE-2026-53150Improper Input Validation0.0–NoCVE-2026-53150
CVE-2026-53167Improper Input Validation0.0–NoCVE-2026-53167
CVE-2026-53168Improper Input Validation0.0–NoCVE-2026-53168
CVE-2026-53177Improper Input Validation0.0–NoCVE-2026-53177
CVE-2026-53181Improper Input Validation0.0–NoCVE-2026-53181
CVE-2026-53183Improper Input Validation7.5–NoCVE-2026-53183
CVE-2026-53184Improper Input Validation7.5–NoCVE-2026-53184
CVE-2026-53192Improper Input Validation7.8–NoCVE-2026-53192
CVE-2026-53198Improper Input Validation8.8–NoCVE-2026-53198
CVE-2026-53208Improper Input Validation0.0–NoCVE-2026-53208
CVE-2026-53212Improper Input Validation7.8–NoCVE-2026-53212
CVE-2026-53218Improper Input Validation0.0–NoCVE-2026-53218
CVE-2026-53219Improper Input Validation0.0–NoCVE-2026-53219
CVE-2026-53221Improper Input Validation9.8–NoCVE-2026-53221
CVE-2026-53225Improper Input Validation9.1–NoCVE-2026-53225
CVE-2026-53227Improper Input Validation0.0–NoCVE-2026-53227
CVE-2026-53228Improper Input Validation9.8–NoCVE-2026-53228
CVE-2026-53236Improper Input Validation0.0–NoCVE-2026-53236
CVE-2026-53239Improper Input Validation7.8–NoCVE-2026-53239
CVE-2026-53242Improper Input Validation7.8–NoCVE-2026-53242
CVE-2026-53245Improper Input Validation0.0–NoCVE-2026-53245
CVE-2026-53249Improper Input Validation0.0–NoCVE-2026-53249
CVE-2026-53253Improper Input Validation7.1–NoCVE-2026-53253
CVE-2026-53254Improper Input Validation8.1–NoCVE-2026-53254
CVE-2026-53255Improper Input Validation0.0–NoCVE-2026-53255
CVE-2026-53256Improper Input Validation8.0–NoCVE-2026-53256
CVE-2026-53263Improper Input Validation0.0–NoCVE-2026-53263
CVE-2026-53264Use After Free7.8–NoCVE-2026-53264
CVE-2026-53265Improper Input Validation7.8–NoCVE-2026-53265
CVE-2026-53268Improper Input Validation8.2–NoCVE-2026-53268
CVE-2026-53269Improper Input Validation0.0–NoCVE-2026-53269
CVE-2026-53275Improper Input Validation8.8–NoCVE-2026-53275
CVE-2026-53325Improper Input Validation0.0–NoCVE-2026-53325
CVE-2026-53337Improper Input Validation0.0–NoCVE-2026-53337
CVE-2026-53349Improper Input Validation0.0–NoCVE-2026-53349
CVE-2026-53350Improper Input Validation0.0–NoCVE-2026-53350
CVE-2026-53352Improper Input Validation0.0–NoCVE-2026-53352
CVE-2026-53356Improper Input Validation7.8–NoCVE-2026-53356
CVE-2026-53358Improper Input Validation8.8–NoCVE-2026-53358
CVE-2026-53362Heap-based Buffer Overflow7.8–Yes (added 2026-08-27)CVE-2026-53362
CVE-2026-64560Improper Input Validation7.8–NoCVE-2026-64560

Affected products (1)

Vendor fixes and mitigations (from advisory)

Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.

Sources

This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.

Weekly OT patch digest

Every week: the new ICS advisories that touch oil & gas gear, what they mean, and what to do. Free.

Subscribe free

Opens our signup page on beehiiv, where you enter your email. Unsubscribe anytime.