VulnHub

Recent vulnerabilities have been discovered in Panduit's IntraVUE software, affecting versions 3.2.1a14 and earlier. These security flaws could allow attackers to manipulate industrial control devices remotely without needing physical access or specialized tools. Notably, one vulnerability involves the storage of passwords in plaintext, which could expose sensitive credentials via the API. Users are urged to upgrade to version 3.2.1a16 or later to mitigate these risks. With potential impacts on critical infrastructure sectors including manufacturing, energy, and water systems, the urgency for organizations to update their software is high to prevent exploitation.

A serious vulnerability in Microsoft SharePoint Server, identified as CVE-2026-50522, is currently being exploited in the wild. This flaw, which has a CVSS score of 9.8, allows attackers to execute arbitrary code on affected systems through deserialization of untrusted data. The vulnerability was patched by Microsoft during its July 2026 Patch Tuesday update but has since been targeted by malicious actors. Organizations using SharePoint need to prioritize applying the latest security updates to protect against potential unauthorized access and exploitation. It's crucial for administrators to stay vigilant and monitor their systems for any signs of compromise.

Zimbra has released an update to fix several serious security vulnerabilities, including a command injection flaw in its Simple Network Management Protocol (SNMP) component. The update, version 10.1.20, addresses a total of nine vulnerabilities, with the SNMP issue being particularly concerning as it could allow attackers to execute unauthorized commands when SNMP notifications are enabled. This could potentially expose sensitive data or disrupt services for organizations using Zimbra's platform. Companies that rely on Zimbra for email and collaboration tools need to update their systems promptly to mitigate these risks and ensure their environments remain secure.

Siemens has identified multiple vulnerabilities in its SIDIS Secured SmartPlug, particularly affecting versions prior to 7.26.0310. The vulnerabilities stem from components like OpenSSL and OpenSSH, leading to severe security risks including improper message integrity enforcement and various buffer overflow issues. These flaws could allow attackers to exploit the system for arbitrary code execution or denial of service. Siemens strongly recommends updating to the latest version to mitigate these risks. This situation is critical, especially for users in critical manufacturing sectors globally, as it exposes them to potential exploitation by malicious actors.

Siemens has reported a vulnerability in multiple versions of its IAM Client software, which could allow an authenticated local attacker to escalate their privileges. This unquoted search path vulnerability affects various Siemens products, including COMOS, Designcenter NX, and several Simcenter and Solid Edge applications. Siemens has rolled out updates for several affected versions and advises users to upgrade to the latest releases to mitigate the risk. For products that do not currently have fixes available, Siemens is recommending additional countermeasures. Organizations using these products should take immediate action to ensure their systems are secure, as this issue could potentially expose sensitive environments in critical industries such as manufacturing and energy.

Palo Alto Networks has issued an advisory regarding vulnerabilities in its PAN-OS software that affect the Siemens RUGGEDCOM APE1808, utilized in critical manufacturing sectors globally. The vulnerabilities include cross-site scripting, privilege escalation, and command injection, which could allow authenticated users to execute arbitrary commands or store malicious scripts. Users of the RUGGEDCOM APE1808 need to be particularly cautious, as these security flaws could lead to unauthorized access and potential exploitation of the device. Siemens recommends that affected customers consult with their support teams to obtain patches and implement security measures to protect their systems.

Siemens has identified multiple vulnerabilities affecting its CADRA software, primarily linked to zlib and Foxit libraries. These vulnerabilities include issues like improper input validation and buffer overflows, which could allow attackers to disrupt service or exploit systems. Siemens is urging users to update to CADRA version V2511 or later to mitigate these risks. For systems that cannot be immediately updated, the company recommends specific countermeasures to reduce exposure until fixes are available. This situation is particularly critical for sectors such as chemical and energy, where security vulnerabilities can have serious implications.

Rockwell Automation has disclosed a significant vulnerability in its FactoryTalk Services Platform (FTSP) version 6.60, which could allow attackers to impersonate authorized users. This flaw arises from weak authentication practices, specifically the inability of the application to properly validate JSON Web Tokens (JWT). As a result, low-privilege users could exploit this vulnerability to gain unauthorized access to critical system configurations and permissions. Organizations using FTSP are urged to apply a specific patch (RAID 1158263) or the February 2026 Patch Roll-up to mitigate this risk. As of now, there have been no reports of active exploitation in the wild, but users are advised to follow best security practices to protect their systems.

Siemens has identified a significant security vulnerability in its Opcenter X software, specifically in versions prior to V2604. This flaw allows attackers to bypass authentication, enabling unauthorized access to the application and the ability to impersonate any user, including administrators. The vulnerability stems from improper validation of the algorithm in the JSON Web Token (JWT) header, which could lead to severe security breaches. Siemens has urged all users to upgrade to version V2604 or later to mitigate this risk. This incident is particularly alarming as it affects critical manufacturing infrastructures worldwide, emphasizing the need for timely software updates and robust cybersecurity practices.

Zimbra has released an important update that addresses several serious security vulnerabilities, including command injection, cross-site scripting (XSS), restriction bypass, and server-side request forgery (SSRF) issues. These vulnerabilities could allow attackers to execute arbitrary commands, manipulate web pages, bypass security controls, or make unauthorized requests to other services. Users of Zimbra's email and collaboration software should apply this update promptly to protect their systems from potential exploitation. The vulnerabilities are significant as they could lead to unauthorized access to sensitive information or compromise the integrity of the systems involved. Regular updates are essential for maintaining security and preventing breaches.

7-Zip has addressed a significant vulnerability that could allow attackers to execute harmful code by tricking users into opening specially crafted XZ-compressed files. The flaw was identified by researcher Landon Peng and affects versions prior to 26.02. If a user opens a malicious archive, it could lead to remote code execution, posing a risk to their system. Users of 7-Zip should update to version 26.02 immediately to protect themselves from potential exploitation. This incident is a reminder of the importance of keeping software up to date to safeguard against emerging threats.