Indexed vulnerabilities with severity, CVSS, and vendor context.
Update Siemens Solid Edge to V225.0.15 or later (SE2025) or V226.0.7 or later (SE2026). Apply patches from https://support.sw.siemens.com/product/246738425/. Restrict execution of untrusted PAR, PSM, and DFT files. Apply application whitelisting where possible.
Update WordPress core to version 7.1.1 or later immediately. Ensure all themes and plugins are kept up to date. As additional mitigation, administrators should consider restricting comment functionality where not required for site operations and monitor for unusual activity in comment sections.
Update to firmware version 4.5.3.0 or newer. Restrict management interfaces to trusted networks (VPN, ACLs). Avoid exposing administrative APIs to the public internet. Enforce strong authentication. Monitor for anomalous API activity and unexpected device reboots. Patches available via iDirect Support Portal.
Update to firmware version 4.5.3.0 or newer. Restrict management interfaces to trusted networks (VPN, ACLs). Avoid exposing administrative APIs to the public internet. Enforce strong authentication. Monitor for anomalous API activity and unexpected device reboots. Patches available via iDirect Support Portal.
CISA and BOD 26-04 require Federal Civilian Executive Branch agencies to prioritize rapid remediation of KEV Catalog vulnerabilities on publicly exposed assets. All organizations should apply available patches, adopt risk-based vulnerability management, and check for prior compromise before patching. Vulnerabilities can be nominated for addition to the KEV Catalog via CISA's KEV Nomination Form if they meet criteria of a CVE ID, evidence of exploitation, and clear mitigation guidance.
As of the advisory date, no patch is available. Ebyte has not confirmed a timeline. Organizations should: 1) Restrict network access to the device's web management interface to trusted users only. 2) Use network segmentation to isolate the device from untrusted networks. 3) Monitor device logs for unauthorized access or configuration changes. 4) Contact Ebyte for patch availability updates. 5) If possible, disable remote management features until a patch is applied.
Update Siemens Reyrolle 7SR5 to version V2.70 or later. Apply the vendor fix via https://support.industry.siemens.com/cs/ww/en/view/109772413/. Monitor for future security advisories and restrict network access to the web management interface where possible.
Organizations using Ebyte NE2-D11 devices should: 1) Isolate affected devices from untrusted networks where possible, 2) Monitor for vendor communications regarding patch availability, 3) Contact Ebyte directly for updates on remediation, 4) Implement network segmentation and strict access controls to limit exposure, 5) Credentials should be rotated if exposure is suspected due to CVE-2026-73839.
CISA and BOD 26-04 require Federal Civilian Executive Branch agencies to prioritize rapid remediation of KEV Catalog vulnerabilities on publicly exposed assets. All organizations should apply available patches, adopt risk-based vulnerability management, and check for prior compromise before patching. Vulnerabilities can be nominated for addition to the KEV Catalog via CISA's KEV Nomination Form if they meet criteria of a CVE ID, evidence of exploitation, and clear mitigation guidance.
CISA and BOD 26-04 require Federal Civilian Executive Branch agencies to prioritize rapid remediation of KEV Catalog vulnerabilities on publicly exposed assets. All organizations should apply available patches, adopt risk-based vulnerability management, and check for prior compromise before patching. Vulnerabilities can be nominated for addition to the KEV Catalog via CISA's KEV Nomination Form if they meet criteria of a CVE ID, evidence of exploitation, and clear mitigation guidance.
Update Siemens Reyrolle 7SR5 to version V2.70 or later. Apply the vendor fix via https://support.industry.siemens.com/cs/ww/en/view/109772413/. Monitor for future security advisories and restrict network access to the web management interface where possible.
Eufy recommends upgrading firmware to version 1.6.4 or later. CISA advises minimizing network exposure for devices, ensuring they are not internet-accessible, placing them behind firewalls segregated from business networks, and using updated VPNs for remote access.
Botslab has not responded to requests to work with CISA to mitigate these vulnerabilities. No official patch has been publicly confirmed. Users of affected firmware versions are advised to reach out to Botslab via the official website (https://www.botslab.com/pages/about-botslab) for guidance. Organizations should monitor for firmware updates, segment affected devices on networks where possible, and review access controls for dashcam deployments.
Update to firmware version 4.5.3.0 or newer. Restrict management interfaces to trusted networks (VPN, ACLs). Avoid exposing administrative APIs to the public internet. Enforce strong authentication. Monitor for anomalous API activity and unexpected device reboots. Patches available via iDirect Support Portal.
Update to firmware version 4.5.3.0 or newer. Restrict management interfaces to trusted networks (VPN, ACLs). Avoid exposing administrative APIs to the public internet. Enforce strong authentication. Monitor for anomalous API activity and unexpected device reboots. Patches available via iDirect Support Portal.
Rockwell Automation has released corrected versions. Customers unable to upgrade should follow security best practices at the Rockwell Automation support portal. CISA recommends minimizing network exposure, locating control system networks behind firewalls, isolating them from business networks, and using VPNs for remote access.
Organizations should immediately apply the security update released by Check Point on September 22, 2026. All affected versions of the Security Management Server must be patched. Network segmentation and monitoring of web service interfaces are recommended as interim measures. Review system logs for indicators of compromise.
Update Siemens Reyrolle 7SR5 to version V2.70 or later. Apply the vendor fix via https://support.industry.siemens.com/cs/ww/en/view/109772413/. Monitor for future security advisories and restrict network access to the web management interface where possible.
Apply the latest WordPress security updates immediately. Implement web application firewall rules to block suspicious file uploads and path traversal patterns. Monitor server logs for unauthorized file creation or execution. Restrict file permissions and disable unused PHP functions.
Upgrade to Mirth Connect v4.7.2 or later from the NextGen Healthcare customer portal. Minimize network exposure, isolate control system networks behind firewalls, and use updated VPNs for remote access.
As of the advisory date, no patch is available. Ebyte has not confirmed a timeline. Organizations should: 1) Restrict network access to the device's web management interface to trusted users only. 2) Use network segmentation to isolate the device from untrusted networks. 3) Monitor device logs for unauthorized access or configuration changes. 4) Contact Ebyte for patch availability updates. 5) If possible, disable remote management features until a patch is applied.
Botslab has not responded to requests to work with CISA to mitigate these vulnerabilities. No official patch has been publicly confirmed. Users of affected firmware versions are advised to reach out to Botslab via the official website (https://www.botslab.com/pages/about-botslab) for guidance. Organizations should monitor for firmware updates, segment affected devices on networks where possible, and review access controls for dashcam deployments.
Apply the latest security patches provided by WSO2. Review and follow WSO2's JWT configuration guidelines to ensure proper signature verification. Monitor official WSO2 security advisories for updates and additional mitigation steps.
Eufy recommends upgrading firmware to version 1.6.4 or later. CISA advises minimizing network exposure for devices, ensuring they are not internet-accessible, placing them behind firewalls segregated from business networks, and using updated VPNs for remote access.
Eufy recommends upgrading firmware to version 1.6.4 or later. CISA advises minimizing network exposure for devices, ensuring they are not internet-accessible, placing them behind firewalls segregated from business networks, and using updated VPNs for remote access.
Botslab has not responded to requests to work with CISA to mitigate these vulnerabilities. No official patch has been publicly confirmed. Users of affected firmware versions are advised to reach out to Botslab via the official website (https://www.botslab.com/pages/about-botslab) for guidance. Organizations should monitor for firmware updates, segment affected devices on networks where possible, and review access controls for dashcam deployments.
Botslab has not responded to requests to work with CISA to mitigate these vulnerabilities. No official patch has been publicly confirmed. Users of affected firmware versions are advised to reach out to Botslab via the official website (https://www.botslab.com/pages/about-botslab) for guidance. Organizations should monitor for firmware updates, segment affected devices on networks where possible, and review access controls for dashcam deployments.
As of the advisory date, no patch is available. Ebyte has not confirmed a timeline. Organizations should: 1) Restrict network access to the device's web management interface to trusted users only. 2) Use network segmentation to isolate the device from untrusted networks. 3) Monitor device logs for unauthorized access or configuration changes. 4) Contact Ebyte for patch availability updates. 5) If possible, disable remote management features until a patch is applied.
CISA and BOD 26-04 require Federal Civilian Executive Branch agencies to prioritize rapid remediation of KEV Catalog vulnerabilities on publicly exposed assets. All organizations should apply available patches, adopt risk-based vulnerability management, and check for prior compromise before patching. Vulnerabilities can be nominated for addition to the KEV Catalog via CISA's KEV Nomination Form if they meet criteria of a CVE ID, evidence of exploitation, and clear mitigation guidance.
Upgrade to Mirth Connect v4.7.2 or later from the NextGen Healthcare customer portal. Minimize network exposure, isolate control system networks behind firewalls, and use updated VPNs for remote access.
No patch or specific mitigation details were provided in the source. Affected organizations should monitor official Issabel security advisories, restrict network access to the framework interface, and apply available updates when released.
Update the miniOrange SAML 2.0 Single Sign On plugin to the latest patched version immediately. If updating is not immediately possible, disable the plugin to prevent exploitation, noting that this may disrupt SAML-based single sign-on functionality.
Disable the esp4 and esp6 kernel modules to mitigate CVE-2026-43284. Disable the rxrpc kernel module to mitigate CVE-2026-43500. Apply principle of least privilege for local users. Follow process control network hardening guidelines (physical isolation, no direct Internet connections). Monitor for vendor-supplied patches.
Organizations should prioritize rapid remediation of the listed KEV Catalog vulnerabilities, particularly on publicly exposed assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements, which include prioritizing patches for vulnerabilities granting total control post-exploitation and checking for prior compromise before applying updates. All organizations are encouraged to adopt risk-based vulnerability management practices, apply vendor-released security updates, and monitor for exploitation activity. Specific mitigation guidance should be obtained from the respective vendors (Red Hat, Microsoft, Citrix, etc.) for each CVE.
Disable the esp4 and esp6 kernel modules to mitigate CVE-2026-43284. Disable the rxrpc kernel module to mitigate CVE-2026-43500. Apply principle of least privilege for local users. Follow process control network hardening guidelines (physical isolation, no direct Internet connections). Monitor for vendor-supplied patches.
Organizations should prioritize rapid remediation of the listed KEV Catalog vulnerabilities, particularly on publicly exposed assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements, which include prioritizing patches for vulnerabilities granting total control post-exploitation and checking for prior compromise before applying updates. All organizations are encouraged to adopt risk-based vulnerability management practices, apply vendor-released security updates, and monitor for exploitation activity. Specific mitigation guidance should be obtained from the respective vendors (Red Hat, Microsoft, Citrix, etc.) for each CVE.
Organizations should prioritize rapid remediation of the listed KEV Catalog vulnerabilities, particularly on publicly exposed assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements, which include prioritizing patches for vulnerabilities granting total control post-exploitation and checking for prior compromise before applying updates. All organizations are encouraged to adopt risk-based vulnerability management practices, apply vendor-released security updates, and monitor for exploitation activity. Specific mitigation guidance should be obtained from the respective vendors (Red Hat, Microsoft, Citrix, etc.) for each CVE.
Update IXON VPN Client to version 1.4.7 or later on all installed systems. As of August 5, 2026, IXON cloud rejects connections from clients below v1.4.7 at both the portal and back-end API. If the client is no longer needed, uninstall it. Refer to the IXON Trust Center Advisory at https://www.ixon.cloud/Advisories/ADV-2026-08-05.pdf for more information.
Organizations should prioritize rapid remediation of the listed KEV Catalog vulnerabilities, particularly on publicly exposed assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements, which include prioritizing patches for vulnerabilities granting total control post-exploitation and checking for prior compromise before applying updates. All organizations are encouraged to adopt risk-based vulnerability management practices, apply vendor-released security updates, and monitor for exploitation activity. Specific mitigation guidance should be obtained from the respective vendors (Red Hat, Microsoft, Citrix, etc.) for each CVE.
Until a patch is released, organizations using Kaltura's mwEmbed library should monitor for updates from Kaltura, restrict network access to the mwEmbedLoader.php endpoint where possible, and implement input validation and monitoring for deserialization-related anomalies.
Until a patch is released, organizations using Kaltura's mwEmbed library should monitor for updates from Kaltura, restrict network access to the mwEmbedLoader.php endpoint where possible, and implement input validation and monitoring for deserialization-related anomalies.
CISA recommends minimizing network exposure for all control system devices and ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. Use VPNs for remote access, updated to the most current version. Perform proper impact analysis and risk assessment prior to deploying defensive measures. Contact PayRange customer support at support@payrange.com for additional information. Note: PayRange has not responded to requests to work with CISA to mitigate this vulnerability.
Apply vendor patches from Linux distribution maintainers immediately. Follow CISA emergency directive requirements for federal agencies. Employ compensating controls if immediate patching is not feasible. Monitor systems for indicators of compromise.
Apply the latest GitLab patches immediately. For self-hosted instances, update to the patched version as specified in the GitLab security advisory. For GitLab.com, ensure the instance is up to date with the latest platform updates. Review file access permissions and restrict access to sensitive directories as a defense-in-depth measure.
Apply vendor patches from Linux distribution maintainers immediately. Follow CISA emergency directive requirements for federal agencies. Employ compensating controls if immediate patching is not feasible. Monitor systems for indicators of compromise.
Update the Mendix SAML module to V4.2.3 or later (Mendix 10/11 compatible) or V3.6.27 or later (Mendix 9.24 compatible). Minimize network exposure by ensuring affected devices are not internet-facing. Locate control system networks behind firewalls and isolate from business networks. Use updated VPNs for remote access. Perform impact analysis and risk assessment before deploying defensive measures.
Apply vendor patches from Linux distribution maintainers immediately. Follow CISA emergency directive requirements for federal agencies. Employ compensating controls if immediate patching is not feasible. Monitor systems for indicators of compromise.
Users of Tencent's Sogou Input Method for Windows should update the application to the latest available version immediately. It is recommended to monitor official Tencent security advisories for patch releases and further technical details. Administrators should enforce update policies and consider temporary deployment restrictions if immediate updating is not feasible. Users should remain vigilant for unusual system behavior and apply network segmentation where possible to limit potential impact.