Skip to contentSiemens Simatic S7-1500 Cpu 1518-4 Pn/dp Mfp (6es7518-4ax00-1ac0) vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()CVE-2026-46046Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreinotify: fix watch count leak when fsnotify_add_inode_mark_locked() failsCVE-2026-46040Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv4: icmp: validate reply type before using icmp_pointersCVE-2026-46037Fix available8.2 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morecrypto: authencesn - reject short ahash digests during instance creationCVE-2026-46033Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morethermal: core: Fix thermal zone governor cleanup issuesCVE-2026-46021Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moretcp: call sk_data_ready() after listener migrationCVE-2026-46015Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULOCVE-2026-45841Fix available5.5 Medium
- pmqs io::compress, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output globCVE-2026-48962Public exploitFix available7.3 High
- pmqs io::uncompress::unzip, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreIO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForwardCVE-2026-48959Fix available7.5 High
- pmqs io::uncompress::unzip, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreIO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS dateCVE-2025-15649Fix available5.5 Medium
- bingos archive::tar, archive\ \, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreArchive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directoryCVE-2026-42497Fix available7.5 High
- bingos archive::tar, archive\ \, red hat enterprise linux 10 +8 more +10 moreArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directoryCVE-2026-42496Fix available9.1 Critical
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit buildsCVE-2026-8376Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipv6: rpl: reserve mac_len headroom when recompressed SRH growsCVE-2026-43501Public exploitFix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morertmutex: Use waiter::task instead of current in remove_waiter()CVE-2026-43499Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morelib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()CVE-2026-43492Fix available5.5 Medium
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Public exploitFix available7.1 High
- python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreFTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host addressCVE-2026-8328Fix available5.9 Medium
- haarg http::tiny, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreHTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header valuesCVE-2026-7010Fix available6.5 Medium
- libexpat project libexpat, red hat discovery 2, enterprise linux 10 +11 more +13 moreIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows...CVE-2026-45186Fix available2.9 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremm/page_alloc: clear page->private in free_pages_prepare()CVE-2026-43303Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: Drop the lock in skb_may_tx_timestamp()CVE-2026-43216Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: ctnetlink: ensure safe access to master conntrackCVE-2026-43116Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexfrm_user: fix info leak in build_mapping()CVE-2026-43089Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminatorCVE-2026-43085Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moredcache: Limit the minimal number of bucket to twoCVE-2026-43071Fix available9.1 Critical
- libssh2, red hat enterprise linux 6, enterprise linux 7 +9 more +11 morelibssh2 userauth.c userauth_password integer overflowCVE-2026-7598Fix available6.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: correctly handle tunneled traffic on IPV6_CSUM GSO fallbackCVE-2026-43057Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leakCVE-2026-43040Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()CVE-2026-43038Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leakCVE-2026-43035Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryptionCVE-2026-43033Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Fix regsafe() for pointers to packetCVE-2026-43030Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: x_tables: ensure names are nul-terminatedCVE-2026-43028Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_helper: pass helper to expect cleanupCVE-2026-43027Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absentCVE-2026-43026Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: ignore explicit helper on new expectationsCVE-2026-43025Fix available7.3 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_tables: reject immediate NF_QUEUE verdictCVE-2026-43024Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/x25: Fix potential double free of skbCVE-2026-43011Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreiio: adc: ti-adc161s626: use DMA-safe memory for spi_read()CVE-2026-31768Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreiio: gyro: mpu3050: Move iio_device_register() to correct locationCVE-2026-31761Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebridge: br_nd_send: validate ND option lengthsCVE-2026-31752Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ftgmac100: fix ring allocation unwind on open failureCVE-2026-31737Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()CVE-2026-31700Fix available7.8 High
- mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreIn MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application...CVE-2026-40355Fix available5.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebridge: br_nd_send: linearize skb before parsing ND optionsCVE-2026-31682Fix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: xt_multiport: validate range encoding in checkentryCVE-2026-31681Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv6: flowlabel: defer exclusive option free until RCU teardownCVE-2026-31680Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()CVE-2026-31674Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morexfrm_user: fix info leak in build_report()CVE-2026-31671Fix available5.5 Medium
- Show moreLoading…