vulnerability Siemens Simcenter Nastran A stack overflow vulnerability exists in Siemens Simcenter Nastran and Femap versions prior to V2606, potentially allowing remote code execution. Siemens has released updates to address the issue. Organizations are advised to update immediately and implement network segmentation and secure remote access practices to mi… CISA Advisories · Aug 18, 2026 High CVE-2026-59086stack-overflowremote-code-executionindustrial-control-systems
vulnerability Siemens Parasolid Siemens Parasolid versions V38.0 and V38.1 are vulnerable to an out-of-bounds read vulnerability when parsing X_T files, potentially allowing an attacker to execute arbitrary code. Siemens has released updates to address… CISA Advisories · Aug 13, 2026 High CVE-2026-64629vulnerabilitysupply-chainindustrial-control-systems
vulnerability Siemens Mendix Runtime A gap in Siemens Mendix Runtime documentation regarding access rules for the System.User entity has been identified, potentially leading developers to apply overly permissive access rules, exposing sensitive user data an… CISA Advisories · Jul 28, 2026 Critical CVE-2026-7891mendixaccess-controlindustrial-control-systems
vulnerability Rockwell Automation CompactLogix Rockwell Automation has issued a security advisory regarding vulnerabilities in its CompactLogix 5370 L1, L2, and L3 controllers. These vulnerabilities, stemming from improper validation of sequence numbers and source IP… CISA Advisories · Jun 16, 2026 Medium CVE-2025-11694CVE-2026-9307UScipdenial-of-serviceindustrial-control-systems