SCADA intelligence
A stack-based buffer overflow vulnerability (CVE-2026-59086) has been identified in Siemens Simcenter Nastran and Femap versions prior to V2606, potentially allowing remote code execution if a user is induced to run an…
Read the analysis →CISA has released an advisory detailing multiple vulnerabilities in the Malcolm network traffic analysis tool suite, including flaws that could lead to remote code execution and denial-of-service conditions.
Read the analysis →A vulnerability in the Simplex Incident Manager allows local attackers to extract cleartext passwords and tokens from system memory. Asset owners should verify versions and evaluate access controls for affected building automation…
Read the analysis →A critical authentication failure in the Node-RED HTTP interface of the Siemens SIMATIC IoT2050 Advanced could allow unauthenticated remote attackers to execute arbitrary code with maximum privileges.
Read the analysis →A high-severity vulnerability (CVE-2026-18965) in the PayRange API allows remote attackers to access verbose device details and potentially cause denial of service. With no vendor patch currently available, OT security leaders should…
Read the analysis →CISA has issued an advisory for multiple critical vulnerabilities in the Ebyte NE2-D11 gateway affecting firmware FW-9167-0-11. These flaws could allow unauthorized administrative access and interception of MQTT traffic, with no patch…
Read the analysis →Critical vulnerabilities in Bendix EC80 Brake ECUs could allow attackers to disrupt ABS, steering assist, and traction control. Fleet managers should verify hardware versions and apply specific firmware updates.
Read the analysis →Critical vulnerabilities affecting all versions of the FURUNO FA-50 Class B AIS Transponder allow for unauthorized alteration of device settings. Because the product is end-of-life, no software patches are available, requiring asset…
Read the analysis →A high-severity vulnerability in Rently Smart Home versions 20.1.0 and prior could allow unauthorized retrieval of Master Pins, potentially granting attackers elevated permissions within commercial facility automation environments.
Read the analysis →A critical vulnerability (CVE-2026-76060) allows authenticated users with specific permissions to execute arbitrary OS commands on Zoneminder servers used for industrial physical security monitoring.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.