Vulnerability Advisories

This page offers a comprehensive view of vulnerabilities identified by Nozomi Networks in critical OT, ICS, and IoT environments, showcasing the deep expertise and dedication of our world-class Security Research team.

Each advisory represents our ongoing effort to enhance the protection of industrial systems, identifying emerging threats before they can be exploited. Immediate protection is available through our Threat Intelligence (TI) subscription, supporting a proactive, forward-thinking defense strategy. For more on our responsible approach, refer to the Responsible Disclosure Policy.

Vulnerability Advisories

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Date Published
CVE ID
Vendor
Product
Type
Risk
Details
October 20, 2026
CVE-2026-43858
Advantech
ADAM-3600
Stack-based Buffer Overflow
High
October 20, 2026
CVE-2026-43857
Advantech
ADAM-3600
OS Command Injection
High
October 20, 2026
CVE-2026-43856
Advantech
ADAM-3600
Stack-based Buffer Overflow
High
October 20, 2026
CVE-2026-43855
Advantech
ADAM-3600
Heap-based Buffer Overflow
High
October 20, 2026
CVE-2026-43854
Advantech
EdgeLink Studio
Storing Passwords in a Recoverable Format
Medium
October 20, 2026
CVE-2026-43853
Advantech
ADAM-3600
Reachable Assertion
High
October 20, 2026
CVE-2026-43852
Advantech
ADAM-3600
Relative Path Traversal
High
October 20, 2026
CVE-2026-43851
Advantech
ADAM-3600
Relative Path Traversal
High
October 20, 2026
CVE-2026-43850
Advantech
ADAM-3600
OS Command Injection
High
October 20, 2026
CVE-2026-43849
Advantech
ADAM-3600
Out-of-bounds Read
Medium
October 20, 2026
CVE-2026-43848
Advantech
ADAM-3600
Out-of-bounds Read
Medium
October 20, 2026
CVE-2026-43847
Advantech
ADAM-3600
Improper Restriction of Excessive Authentication Attempts
High
October 20, 2026
CVE-2026-43846
Advantech
ADAM-3600
Stack-based Buffer Overflow
High
October 20, 2026
CVE-2026-43845
Advantech
ADAM-3600
Weak Password Recovery Mechanism for Forgotten Password
Critical
October 20, 2026
CVE-2026-43844
Advantech
ADAM-3600
Authentication Bypass Using an Alternate Path or Channel
Critical
October 20, 2026
CVE-2026-43843
Advantech
ADAM-3600
Improper Handling of Length Parameter Inconsistency
Medium
October 20, 2026
CVE-2026-43842
Advantech
ADAM-3600
NULL Pointer Dereference
Medium
October 20, 2026
CVE-2026-43841
Advantech
ADAM-3600
NULL Pointer Dereference
Medium
October 20, 2026
CVE-2026-43840
Advantech
ADAM-3600
NULL Pointer Dereference
Medium
October 20, 2026
CVE-2026-43839
Advantech
ADAM-3600
NULL Pointer Dereference
High
October 20, 2026
CVE-2026-43838
Advantech
ADAM-3600
Stack-based Buffer Overflow
Critical
October 20, 2026
CVE-2026-43837
Advantech
ADAM-3600
Stack-based Buffer Overflow
High
October 20, 2026
CVE-2026-43836
Advantech
ADAM-3600
OS Command Injection
Critical
October 20, 2026
CVE-2026-43835
Advantech
ADAM-3600
Improper Verification of Cryptographic Signature
High
October 20, 2026
CVE-2026-43834
Advantech
ADAM-3600
Stack-based Buffer Overflow
High
October 20, 2026
CVE-2026-43833
Advantech
ADAM-3600
Stack-based Buffer Overflow
High
October 20, 2026
CVE-2026-43832
Advantech
ADAM-3600
Stack-based Buffer Overflow
Critical
October 20, 2026
CVE-2026-43831
Advantech
ADAM-3600
Stack-based Buffer Overflow
Critical
October 20, 2026
CVE-2026-43830
Advantech
ADAM-3600
OS Command Injection
High
October 20, 2026
CVE-2026-43829
Advantech
ADAM-3600
Stack-based Buffer Overflow
Critical
October 14, 2026
CVE-2026-101307
freebsd
freebsd
Heap-based Buffer Overflow
High
September 10, 2026
CVE-2026-15419
Silicon Labs
silabser.sys
Out-of-bounds Write
High
September 10, 2026
CVE-2026-15418
Silicon Labs
silabser.sys
Exposure of Sensitive Information to an Unauthorized Actor
Low
September 10, 2026
CVE-2026-15417
Silicon Labs
silabser.sys
Divide By Zero
Medium
September 17, 2026
CVE-2026-90133
Linux kernel
Linux kernel
Heap buffer overflow
High
September 16, 2026
CVE-2026-27564
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27563
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27562
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27561
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27560
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27559
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27558
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27557
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Path Traversal
High
September 16, 2026
CVE-2026-27556
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Control of Filename for Include/Require Statement in PHP Program
High
September 16, 2026
CVE-2026-27555
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Control of Filename for Include/Require Statement in PHP Program
High
September 16, 2026
CVE-2026-27554
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27553
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Inclusion of Functionality from Untrusted Control Sphere
Medium
September 16, 2026
CVE-2026-27552
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Incorrect Authorization
High
September 16, 2026
CVE-2026-27551
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27550
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27549
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27548
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27547
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-27546
Pepperl+Fuchs
ICE2-8IOL-K45P-RJ45
Authentication Bypass Using an Alternate Path or Channel
Critical
September 16, 2026
CVE-2026-73177
Advantech
EKI-1242EIMS
Insufficient Verification of Data Authenticity
High
September 16, 2026
CVE-2026-73176
Advantech
EKI-1242EIMS
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-73175
Advantech
EKI-1242EIMS
Uncontrolled Resource Consumption
High
September 16, 2026
CVE-2026-73174
Advantech
EKI-1242EIMS
Cleartext Transmission of Sensitive Information
High
September 16, 2026
CVE-2026-73173
Advantech
EKI-1242EIMS
Missing Authentication for Critical Function
High
September 16, 2026
CVE-2026-73172
Advantech
EKI-1242EIMS
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Critical
September 16, 2026
CVE-2026-73171
Advantech
EKI-1242EIMS
External Control of File Name or Path
High
September 16, 2026
CVE-2026-73170
Advantech
EKI-1242EIMS
Improper Control of Generation of Code ('Code Injection')
High
September 16, 2026
CVE-2026-73169
Advantech
EKI-1242EIMS
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Medium
September 16, 2026
CVE-2026-73168
Advantech
EKI-1242EIMS
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-73167
Advantech
EKI-1242EIMS
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-73166
Advantech
EKI-1242EIMS
Improper Control of Generation of Code ('Code Injection')
High
September 16, 2026
CVE-2026-73165
Advantech
EKI-1242EIMS
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-73164
Advantech
EKI-1242EIMS
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-73163
Advantech
EKI-1242EIMS
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
September 16, 2026
CVE-2026-19535
Advantech
EKI-1242EIMS
Cross-Site Request Forgery (CSRF)
High
July 6, 2026
CVE-2026-57472
KUNBUS
RevPi Connect 5
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Medium
July 6, 2026
CVE-2026-57471
KUNBUS
RevPi Connect 5
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Medium
July 6, 2026
CVE-2026-57469
KUNBUS
RevPi Connect 5
Cross-Site Request Forgery (CSRF)
Medium
July 6, 2026
CVE-2026-13198
KUNBUS
RevPi Connect 5
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Medium
July 6, 2026
CVE-2026-13197
KUNBUS
RevPi Connect 5
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
High
July 6, 2026
CVE-2026-13196
KUNBUS
RevPi Connect 5
Out-of-bounds Write
High
July 15, 2026
CVE-2026-56136
Tuxera
ntfs-3g
Out-of-bounds Read
Medium
July 15, 2026
CVE-2026-56135
Tuxera
ntfs-3g
Heap-based Buffer Overflow
High
July 15, 2026
CVE-2026-46572
Tuxera
ntfs-3g
Heap-based Buffer Overflow
High
July 15, 2026
CVE-2026-46571
Tuxera
ntfs-3g
Out-of-bounds Read
Medium
July 15, 2026
CVE-2026-46570
Tuxera
ntfs-3g
Heap-based Buffer Overflow
High
July 15, 2026
CVE-2026-46569
Tuxera
ntfs-3g
Heap-based Buffer Overflow
High
July 15, 2026
CVE-2026-42618
Tuxera
ntfs-3g
Off-by-one Error
High
July 15, 2026
CVE-2026-42617
Tuxera
ntfs-3g
Heap-based Buffer Overflow
High
July 15, 2026
CVE-2026-42616
Tuxera
ntfs-3g
Heap-based Buffer Overflow
High
July 20, 2026
CVE-2026-61378
Automationdirect
ADCUP Usb Driver
Divide By Zero
Medium
July 20, 2026
CVE-2026-60073
Automationdirect
ADCUP Usb Driver
Out-of-bounds Read
Medium
July 20, 2026
CVE-2026-57896
Automationdirect
ADCUP Usb Driver
Out-of-bounds Read
Medium
July 20, 2026
CVE-2026-60140
Automationdirect
ADCUP Usb Driver
Out-of-bounds Read
Medium
July 20, 2026
CVE-2026-61389
Automationdirect
ADCUP Usb Driver
Out-of-bounds Write
High
July 20, 2026
CVE-2026-60063
Automationdirect
ADCUP Usb Driver
Out-of-bounds Write
High
July 6, 2026
CVE-2026-13199
Raspberry Pi
Raspberry Pi 5
Insufficient Entropy
Medium
June 26, 2026
CVE-2026-57473
Reolink
Home Hub
Use of Weak Credentials
Medium
May 27, 2026
CVE-2025-41670
Phoenix Contact
PLCnext family
Uncontrolled Search Path Element
High
May 27, 2026
CVE-2025-41669
Phoenix Contact
PLCnext family
Improper Verification of Cryptographic Signature
High
May 29, 2026
CVE-2025-41281
Waterfall
WF-500
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
May 29, 2026
CVE-2025-41280
Waterfall
WF-500
Relative Path Traversal
High
May 29, 2026
CVE-2025-41279
Waterfall
WF-500
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
High
May 29, 2026
CVE-2025-41278
Waterfall
WF-500
Out-of-bounds Read
High
May 29, 2026
CVE-2025-41277
Waterfall
WF-500
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Critical
CVE ID
CVE-2026-43858
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Stack-based Buffer Overflow
Risk Score
High
CVE ID
CVE-2026-43857
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
OS Command Injection
Risk Score
High
CVE ID
CVE-2026-43856
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Stack-based Buffer Overflow
Risk Score
High
CVE ID
CVE-2026-43855
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Heap-based Buffer Overflow
Risk Score
High
CVE ID
CVE-2026-43854
Vendor
Advantech
Product
EdgeLink Studio
Date Published
October 20, 2026
Type
Storing Passwords in a Recoverable Format
Risk Score
Medium
CVE ID
CVE-2026-43853
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Reachable Assertion
Risk Score
High
CVE ID
CVE-2026-43852
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Relative Path Traversal
Risk Score
High
CVE ID
CVE-2026-43851
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Relative Path Traversal
Risk Score
High
CVE ID
CVE-2026-43850
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
OS Command Injection
Risk Score
High
CVE ID
CVE-2026-43849
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Out-of-bounds Read
Risk Score
Medium
CVE ID
CVE-2026-43848
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Out-of-bounds Read
Risk Score
Medium
CVE ID
CVE-2026-43847
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Improper Restriction of Excessive Authentication Attempts
Risk Score
High
CVE ID
CVE-2026-43846
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Stack-based Buffer Overflow
Risk Score
High
CVE ID
CVE-2026-43845
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Weak Password Recovery Mechanism for Forgotten Password
Risk Score
Critical
CVE ID
CVE-2026-43844
Vendor
Advantech
Product
ADAM-3600
Date Published
October 20, 2026
Type
Authentication Bypass Using an Alternate Path or Channel
Risk Score
Critical

Take the next step.

Discover how easy it is to identify and respond to cyber threats by automating your OT and IoT asset discovery, inventory and management.