Skip to contentSiemens Simatic S7-1500 Cpu 1518f-4 Pn/dp vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexfrm: ah: account for ESN high bits in async callbacksCVE-2026-46193Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cacheCVE-2026-46174Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreexit: prevent preemption of oopsing TASK_DEAD taskCVE-2026-46173Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv6: xfrm6: release dst on error in xfrm6_rcv_encap()CVE-2026-46172Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfoCVE-2026-46132Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morexfrm: defensively unhash xfrm_state lists in __xfrm_state_deleteCVE-2026-46116Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: reject zero shift in nft_bitwiseCVE-2026-46101Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: bridge: use a stable FDB dst snapshot in RCU readersCVE-2026-46086Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()CVE-2026-46046Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreinotify: fix watch count leak when fsnotify_add_inode_mark_locked() failsCVE-2026-46040Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv4: icmp: validate reply type before using icmp_pointersCVE-2026-46037Fix available8.2 High
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morecrypto: authencesn - reject short ahash digests during instance creationCVE-2026-46033Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morethermal: core: Fix thermal zone governor cleanup issuesCVE-2026-46021Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moretcp: call sk_data_ready() after listener migrationCVE-2026-46015Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULOCVE-2026-45841Fix available5.5 Medium
- pmqs io::compress, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output globCVE-2026-48962Public exploitFix available7.3 High
- pmqs io::uncompress::unzip, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreIO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForwardCVE-2026-48959Fix available7.5 High
- pmqs io::uncompress::unzip, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreIO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS dateCVE-2025-15649Fix available5.5 Medium
- bingos archive::tar, archive\ \, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreArchive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directoryCVE-2026-42497Fix available7.5 High
- bingos archive::tar, archive\ \, red hat enterprise linux 10 +8 more +10 moreArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directoryCVE-2026-42496Fix available9.1 Critical
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit buildsCVE-2026-8376Fix available9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipv6: rpl: reserve mac_len headroom when recompressed SRH growsCVE-2026-43501Public exploitFix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morertmutex: Use waiter::task instead of current in remove_waiter()CVE-2026-43499Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morelib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()CVE-2026-43492Fix available5.5 Medium
- debian linux, linux kernel, red hat nvidia for rhel 10 +25 more +27 moreptrace: slightly saner 'get_dumpable()' logicCVE-2026-46333Public exploitFix available7.1 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 morenet: skbuff: preserve shared-frag marker during coalescingCVE-2026-46300In KEVPublic exploitFix availableEPSS 16.1%7.8 High
- python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreFTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host addressCVE-2026-8328Fix available5.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +99 more +101 moreAffected devices do not properly validate and sanitize filenames on the Firmware Update page....CVE-2026-257897.2 High
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +99 more +101 moreAffected devices do not properly validate and sanitize Technology Object (TO) name rendered on...CVE-2026-257879.3 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +99 more +101 moreAffected devices do not properly validate and sanitize PLC/station name rendered on the ...CVE-2026-257869.3 Critical
- haarg http::tiny, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreHTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header valuesCVE-2026-7010Fix available6.5 Medium
- libexpat project libexpat, red hat discovery 2, enterprise linux 10 +11 more +13 moreIn libexpat before 2.8.1, the computational complexity of attribute name collision checks allows...CVE-2026-45186Fix available2.9 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremm/page_alloc: clear page->private in free_pages_prepare()CVE-2026-43303Fix available7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +30 more +32 morexfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284Public exploitFix availableEPSS 94.2%8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: Drop the lock in skb_may_tx_timestamp()CVE-2026-43216Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: ctnetlink: ensure safe access to master conntrackCVE-2026-43116Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexfrm_user: fix info leak in build_mapping()CVE-2026-43089Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminatorCVE-2026-43085Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moredcache: Limit the minimal number of bucket to twoCVE-2026-43071Fix available9.1 Critical
- libssh2, red hat enterprise linux 6, enterprise linux 7 +9 more +11 morelibssh2 userauth.c userauth_password integer overflowCVE-2026-7598Fix available6.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: correctly handle tunneled traffic on IPV6_CSUM GSO fallbackCVE-2026-43057Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leakCVE-2026-43040Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()CVE-2026-43038Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leakCVE-2026-43035Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryptionCVE-2026-43033Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Fix regsafe() for pointers to packetCVE-2026-43030Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: x_tables: ensure names are nul-terminatedCVE-2026-43028Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_helper: pass helper to expect cleanupCVE-2026-43027Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absentCVE-2026-43026Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: ignore explicit helper on new expectationsCVE-2026-43025Fix available7.3 High
- Show moreLoading…