Arista says attackers are exploiting a zero-day SQL injection flaw in VeloCloud Orchestrator (VCO), the management system for VeloCloud SD-WAN networks. The bug can let a logged-in user, including one with read-only access, gain operator-level privileges, according to the advisory dated October 22.
Source: The Hacker News
• Published: October 22, 2026
Siemens says multiple vulnerabilities affect the GNU/Linux subsystem in SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware V3.1.7 and later, and it is preparing fixes and mitigations. The issues span many weakness types, including buffer handling and pointer errors.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 22, 2026
This cybersecurity roundup highlights a range of new threats, including leaked AI secrets, source-code theft, a Signal calling flaw, and an authentication bypass in Laravel. It also notes major vulnerabilities in PHP, GitLab, Linux, Node.js, and other services.
Source: The Hacker News
• Published: October 22, 2026
Two severe Linux KSMBD flaws have been disclosed publicly before kernel fixes were available. One can be triggered before authentication, while the other affects systems using SMB Direct and RDMA-capable networks.
Source: The Hacker News
• Published: October 22, 2026
Siemens says multiple vulnerabilities affect the GNU/Linux subsystem in SIMATIC S7-1500 TM MFP V1.1.1 and later, with fixes in preparation and mitigations advised where patches are unavailable. The flaws include buffer overflows, pointer errors, locking problems and other memory-safety issues.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 22, 2026
Siemens says RUGGEDCOM APE1808 devices using Nozomi Guardian/CMC are affected by vulnerabilities reported in Nozomi Guardian/CMC, and customers should contact support for patch details. One issue could let an authenticated user inject a malicious dashboard payload and execute it in a browser context.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 21, 2026
Siemens says several Industrial Edge devices and related SIMATIC HMI panels are affected by path traversal vulnerabilities that could let an authenticated attacker access sensitive internal information. It has released updates for some products and is preparing further fixes for others.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 21, 2026
Siemens says RUGGEDCOM CROSSBOW Station Access Controller contains SQLite-related vulnerabilities that could allow code execution, denial of service or disclosure of sensitive information. It recommends updating to version 6.0 or later.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 21, 2026
Siemens says SIMATIC S7 PLC web server software contains vulnerabilities that could let an attacker run code in an authorised user's browser session and perform PLC actions within that user's permissions. It is preparing fixes and recommends mitigations where updates are not yet available.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 21, 2026
Siemens says some SIMATIC WinCC versions have a database privilege-escalation flaw that could let an authenticated user run commands on the host system. Updates are available for WinCC V8.0 and V8.1, while no fix is yet available for V7.5.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 21, 2026
Siemens says RUGGEDCOM CROSSBOW has multiple vulnerabilities that could allow SQL injection, credential exposure, privilege escalation and denial-of-service attacks. It has released version 6.0 and advises updating.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 21, 2026
Siemens says the .NET Client Library for SIMATIC S7 Webserver API has vulnerabilities that could expose sensitive information or allow files to be written outside the intended directory. It recommends updating to version 3.3.61 or later.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 21, 2026
Siemens says the Industrial Edge Device Kit contains path traversal vulnerabilities that could let an authenticated remote attacker access sensitive internal information. It has released updates for some versions and advises applying the latest available fixes.
Source: Cybersecurity and Infrastructure Security Agency CISA
• Published: October 21, 2026