Skip to contentSiemens Simatic S7-1500 Cpu 1518f-4 Pn/dp Mfp (6es7518-4fx00-1ac0) vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocksCVE-2026-23270Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: add proper RCU protection to /proc/net/ptypeCVE-2026-23255Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: act_gate: snapshot parameters with RCU on replaceCVE-2026-23245Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/umad: Reject negative data_len in ib_umad_writeCVE-2026-23243Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/siw: Fix potential NULL pointer dereference in header processingCVE-2026-23242Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LISTCVE-2025-71267Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefs: ntfs3: check return value of indx_find to avoid infinite loopCVE-2025-71266Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadataCVE-2025-71265Fix available5.5 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after...CVE-2026-32778Fix available2.9 Low
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777Fix available4.0 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity...CVE-2026-32776Fix available4.0 Medium
- debian linux, openbsd openssh, canonical ubuntu linux +39 more +41 moreVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...CVE-2026-3497Fix available2.7 Low
- python-markdown markdown, red hat external secrets operator for red hat openshift, multicluster engine for kubernetes +27 more +29 morePython-Markdown has an Uncaught ExceptionCVE-2025-69534Fix available7.5 High
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +6 more +8 morenetfilter: nf_tables: fix use-after-free in nf_tables_addchain()CVE-2026-23231Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: cls_u32: use skb_header_pointer_careful()CVE-2026-23204Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()CVE-2025-71221Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: fix segmentation of forwarding fraglist GROCVE-2026-23154Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreio_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loopCVE-2026-23113Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 morenetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()CVE-2026-23111Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morescsi: core: Wake up the error handler when final completions race against each otherCVE-2026-23110Fix available4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipvlan: Make the addrs_lock be per portCVE-2026-23103Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremm/hugetlb: fix hugetlb_pmd_shared()CVE-2026-23100Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moregue: Fix skb memleak with inner IP protocol 0.CVE-2026-23095Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morescsi: xen: scsiback: Fix potential memory leak in scsiback_remove()CVE-2026-23087Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevsock/virtio: cap TX credit to local buffer sizeCVE-2026-23086Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebe2net: Fix NULL pointer dereference in be_cmd_get_mac_from_listCVE-2026-23084Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefou: Don't allow 0 for FOU_ATTR_IPPROTO.CVE-2026-23083Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN specCVE-2026-23060Fix available5.5 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morew1: therm: Fix off-by-one buffer overflow in alarms_storeCVE-2025-71197Fix availableNo score
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenet: hv_netvsc: reject RSS hash key programming without RX indirection tableCVE-2026-23054Fix available6.7 Medium
- linux, siemens ruggedcom rst2428p (6gk6242-6pa00), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morepnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()CVE-2026-23038Fix available2.0 Low
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()CVE-2026-23026Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: at_hdmac: fix device leak on of_dma_xlate()CVE-2025-71191Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: bcm-sba-raid: fix device leak on probeCVE-2025-71190Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: dw: dmamux: fix OF node leak on route allocation failureCVE-2025-71189Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: stm32: dmamux: fix device leak on route allocationCVE-2025-71186Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: ti: dma-crossbar: fix device leak on am335x route allocationCVE-2025-71185Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: marvell: prestera: fix NULL dereference on devlink_alloc() failureCVE-2026-23019Fix available5.5 Medium
- libexpat project libexpat, siemens ruggedcom rst2428p (6gk6242-6pa00), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreIn libexpat before 2.7.4, the doContent function does not properly determine the buffer size...CVE-2026-25210Fix available6.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: ip_gre: make ipgre_header() robustCVE-2026-23011Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: Fix use-after-free in inet6_addr_del().CVE-2026-23010Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1CVE-2026-23005Public exploitFix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()CVE-2026-23003Public exploitFix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: idxd: fix device leaks on compat bind and unbindCVE-2025-71163Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: tegra-adma: Fix use-after-freeCVE-2025-71162Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Fix reference count leak in bpf_prog_test_run_xdp()CVE-2026-22994Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morelibceph: return the handler error from mon_handle_auth_done()CVE-2026-22992Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: mscc: ocelot: Fix crash when adding interface under a lagCVE-2026-22982Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenfsd: provide locking for v4_end_graceCVE-2026-22980Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: fix memory leak in skb_segment_list for GRO packetsCVE-2026-22979Fix available5.5 Medium
- Show moreLoading…