Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
634 articles about Vulnerabilities
Decision Insights Threat Desk • November 27, 2025
A vulnerability in Opto 22's GRV-EPIC and groov RIO devices allows remote command execution with root privileges. Affected firmware versions are prior to 4.0.3. A patch is available, and CISA recommends network security measures.
Decision Insights Threat Desk • November 27, 2025
A vulnerability in Siemens TIA-Portal software used in Festo Didactic products allows potential arbitrary file creation or overwriting and code execution. Users are advised to update affected software versions and apply recommended cybersecurity practices to mitigate social engineering risks.
Decision Insights Threat Desk • November 27, 2025
A vulnerability affecting Festo's MSE6-C2M/D2M/E2M product family has been identified, involving hidden functions in undocumented test mode exploitable remotely by authenticated, low-privilege attackers. Mitigation includes updated documentation and network defense measures, with no public exploitation reported.
Decision Insights Threat Desk • November 27, 2025
A stack-based buffer overflow in Emerson's Appleton UPSMON-PRO allows remote code execution via UDP port 2601 in versions 2.6 and earlier.
Decision Insights Threat Desk • November 27, 2025
Vulnerabilities in iCam365 P201 and QC021 cameras allow unauthorized access to video streams and settings due to missing authentication.
Decision Insights Threat Desk • November 27, 2025
CISA issued six advisories detailing vulnerabilities in Industrial Control Systems products and urges review of mitigation details.
Decision Insights Threat Desk • November 27, 2025
Automated Logic's WebCTRL Premium Server vulnerabilities allow redirection and script attacks; fixed in version 9.0 with mitigation advice.
Decision Insights Coverage • November 27, 2025
ONES enhances enterprise SONiC security with mutual TLS, RBAC, LDAP, continuous scans, and telemetry monitoring for compliance.
Decision Insights Coverage • November 26, 2025
Netskope Threat Labs forecasts AI to reshape security practices and threats in 2026 with privacy-focused deployments and new vulnerabilities.
Decision Insights Threat Desk • November 26, 2025
CISA issued guidance for Emergency Directive 25-03 on Cisco ASA and Firepower vulnerabilities CVE-2025-20333 and CVE-2025-20362.
Decision Insights Threat Desk • November 26, 2025
CISA added the actively exploited Google Chromium V8 type confusion flaw CVE-2025-13223 to its Known Exploited Vulnerabilities Catalog.
Decision Insights Threat Desk • November 26, 2025
CISA added CVE-2025-13223 in Google Chromium V8 to its Known Exploited Vulnerabilities Catalog, urging prompt remediation.