Security advisories
Plain-English explanations of named CVEs affecting industrial, medical and IoT devices, each one sourced to NVD, CISA KEV and FIRST EPSS so you can check the evidence behind the score. Every entry lists affected components, versions and the vendor’s own advisory. Not a vulnerability feed for your products — see firmware security for that.
163 results
CVE-2026-76504
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Auth Bypass (KEV)
Cisco Catalyst SD-WAN Manager
CVE-2026-76519
CVE-2026-76519: Cisco Secure Email Gateway RCE
Cisco Secure Email Gateway (AsyncOS)
CVE-2026-8037
CVE-2026-8037: Progress Kemp LoadMaster Unauthenticated OS Command Injection RCE
Progress Kemp LoadMaster
CVE-2026-81535
CVE-2026-81535: wolfSSH Unauthorized Forwarded-TCPIP Channel Opens
wolfSSH
CVE-2026-83548
CVE-2026-83548: SonicWall SMA1000 Pre-Auth SSRF (KEV)
SonicWall SMA1000 Appliances (SMA8200v, SMA6210, SMA7210)
CVE-2026-83549
CVE-2026-83549: SonicWall SMA1000 Post-Auth OS Command Injection (KEV)
SonicWall SMA1000 Appliances (SMA8200v, SMA6210, SMA7210)
CVE-2026-8452
CVE-2026-8452: Citrix NetScaler ADC/Gateway Memory Overflow (KEV)
Citrix NetScaler ADC
CVE-2026-85079
CVE-2026-85079: Silicon Labs EmberZNet Zigbee Out-of-Bounds Write RCE
Silicon Labs EmberZNet (Zigbee stack)
CVE-2026-85102
CVE-2026-85102: Check Point Quantum Gateway/Spark VPN Cert-Validation RCE (KEV)
Check Point Security Gateway / Spark Firewall (Gaia Embedded)
CVE-2026-86060
CVE-2026-86060: MikroTik RouterOS SSH Privilege Escalation (KEV, "MikroTrick")
MikroTik RouterOS
CVE-2026-87659
CVE-2026-87659: Brocade Fabric OS Inband Management Authorization Bypass
Brocade Fabric OS
CVE-2026-88771
CVE-2026-88771: Citrix NetScaler ADC/Gateway Unauthenticated Command Execution (KEV)
Citrix NetScaler ADC
CVE-2026-88772
CVE-2026-88772: Citrix NetScaler ADC/Gateway DTLS Pre-Auth Memory Overflow (KEV)
Citrix NetScaler ADC / NetScaler Gateway
CVE-2026-88779
CVE-2026-88779: Citrix NetScaler ADC/Gateway Memory Buffer DoS (KEV)
Citrix NetScaler ADC
CVE-2026-93616
CVE-2026-93616: Check Point Security Management Pre-Auth RCE (KEV)
Check Point Security Management Server
CVE-2026-93952
CVE-2026-93952: Arista VeloCloud Orchestrator Flaw (KEV)
Arista VeloCloud Orchestrator (VCO) On-Prem
CVE-2026-94127
CVE-2026-94127: F5 BIG-IP APM OAuth Heap Overflow RCE (KEV)
F5 BIG-IP Access Policy Manager (APM)
CVE-2026-9586
CVE-2026-9586: Sangoma Switchvox Unauthenticated SQLi to RCE (KEV)
Sangoma Switchvox
CVE-2026-9853
CVE-2026-9853: Hitachi Energy MicroSCADA Auth Bypass
Hitachi Energy MicroSCADA X SYS600
Fix guides for the weakness classes behind these CVEs
Each advisory links to the guide for its weakness class. The guides show device and firmware teams how to detect, fix, verify and disclose that class across a product line, not one CVE at a time.
How to fix authentication bypass in embedded firmware
Practical steps for device and firmware teams to detect, fix, verify and disclose authentication bypass and missing authentication (CWE-287/CWE-306 and related CWEs) in embedded products, sourced to MITRE CWE.
Updated
How to fix command injection in embedded firmware
Practical steps for device and firmware teams to detect, fix, verify and disclose OS command injection (CWE-77/CWE-78) in embedded products, sourced to MITRE CWE and OWASP.
Updated
How to fix hard-coded credentials in embedded firmware
Practical steps for device and firmware teams to detect, fix, verify and disclose hard-coded passwords and keys (CWE-798/CWE-259) in embedded products, sourced to MITRE CWE and CISA.
Updated
How to fix SQL injection, XSS, resource exhaustion and deserialization flaws in embedded firmware
Practical steps for device and firmware teams to detect, fix, verify and disclose SQL injection (CWE-89), cross-site scripting (CWE-79), resource exhaustion (CWE-400) and insecure deserialization (CWE-502) in embedded web UIs and management APIs, sourced to MITRE CWE and OWASP.
Updated
How to fix memory corruption in embedded firmware
Practical steps for device and firmware teams to detect, fix, verify and disclose memory-corruption bugs (CWE-787/CWE-120 and related out-of-bounds, overflow and use-after-free CWEs) in embedded products, sourced to MITRE CWE and CISA.
Updated
How to fix path traversal in embedded firmware
Practical steps for device and firmware teams to detect, fix, verify and disclose path traversal (CWE-22 and related CWEs) in embedded web UIs and file-handling code, sourced to MITRE CWE.
Updated
How to fix weak cryptography in embedded firmware
Practical steps for device and firmware teams to detect, fix and verify broken ciphers, inadequate key strength, hard-coded keys and weak random number generation (CWE-327/326/321/330) in embedded products, sourced to MITRE CWE and CISA.
Updated
Firmware vulnerabilities & fixes
OWASP Firmware Security Testing Methodology (FSTM), explained
OWASP's nine-stage Firmware Security Testing Methodology (FSTM) — obtaining and extracting firmware, static and dynamic analysis, emulation and exploitation — plus how it fits with OWASP's ISTG and ISVS.
Updated
Find out which of these CVEs are in your products or plant
Device firmware security: find the problems, then fix them
Firmware scan, SBOM and vulnerability report for device makers and brands, with optional remediation, maintenance and monitoring.
OT Snapshot: see what is really on your shop-floor network
Record shop-floor traffic from a mirror port, upload it, and receive a device inventory, vulnerabilities and a map of remote access.
Questions about this page?