Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 10:05 UTC

Critical in the last 24 hours

1601 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

209-65% vs 7-day avg of 596

2 critical, 81 high, 83 medium, 33 low

Expand	Severity	Score	Advisory	Title	Source	Published
	High	7.1	CVE-2026-82947	SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers RT-Labs AB, SOEMRT-Labs AB SOEM, SOEM	NVD	Oct 26 09:16 UTC
CVE-2026-82947SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device can cause the master to read data outside allocated buffers Executive summary SOEM, an open-source EtherCAT master library, is affected by multiple vulnerabilities in version 2.0.0 and earlier. A malicious device on the network can cause the master to read memory outside its allocated buffers, which could leak sensitive information or crash the software. Technical summary The flaws are out-of-bounds reads in frame processing. The software uses length and offset values from device messages without checking them against buffer sizes. The advisory states that a malicious device is the attack source, and it does not describe other preconditions. Affected versions are SOEM 2.0.0 and earlier. Fixed versions are not stated. Workarounds are not stated. Exploitation in the wild is not stated. A CVSS score is not stated. No detection guidance is given. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityLow How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L Affects RT-Labs AB SOEM RT-Labs AB SOEM SOEM NIST National Vulnerability DatabasePublished Oct 26, 2026 09:16 UTC Read the advisory
	Medium	6.5	CVE-2026-82946	SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system RT-Labs AB, SOEMRT-Labs AB SOEM, SOEM	NVD	Oct 26 09:16 UTC
CVE-2026-82946SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system Executive summary SOEM, an open-source EtherCAT master library, has a flaw that lets a malicious device crash the master system. The advisory says an attacker can trigger it with a simple sequence of two messages. Technical summary The flaw is a use-after-clear pointer bug: when the software receives an error response it clears an internal pointer but keeps processing, and if another message arrives before timeout it dereferences the cleared pointer and crashes. The attack vector is a malicious device on the network sending a crafted message sequence, and the stated precondition is that a second message arrives before timeout. Affected versions are stated as SOEM 2.0.0 and earlier. No fixed version is stated, no workaround is stated, no CVSS score is stated, and no detection guidance is stated. Exploitation in the wild is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects RT-Labs AB SOEM RT-Labs AB SOEM SOEM NIST National Vulnerability DatabasePublished Oct 26, 2026 09:16 UTC Read the advisory
	Medium	6.5	CVE-2026-82945	SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption RT-Labs AB, SOEMRT-Labs AB SOEM, SOEM	NVD	Oct 26 09:16 UTC
CVE-2026-82945SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption Executive summary SOEM, an open-source EtherCAT master library, is affected by a memory corruption flaw in versions 2.0.0 and earlier. A malicious device on the network can trigger the flaw during device configuration and may disrupt later operations. Technical summary The flaw is an out-of-bounds write caused by missing bounds checks on a fixed-size array. The advisory says the software writes configuration data to an array sized by EC_MAXFMMU without checking the index, so a device presenting more than EC_MAXFMMU configuration blocks can write past the array and corrupt adjacent memory. The attack vector is a malicious device during device configuration, and the advisory does not state whether authentication or physical access is needed. Affected versions are SOEM 2.0.0 and earlier; the advisory does not state a fixed version. The advisory does not state a workaround, exploitation in the wild, a CVSS score, or detection guidance. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects RT-Labs AB SOEM RT-Labs AB SOEM SOEM NIST National Vulnerability DatabasePublished Oct 26, 2026 09:16 UTC Read the advisory
	High	8.8	CVE-2026-82944	SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious device can overflow memory buffers RT-Labs AB, SOEMRT-Labs AB SOEM, SOEM	NVD	Oct 26 09:16 UTC
CVE-2026-82944SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious device can overflow memory buffers Executive summary SOEM, an open-source EtherCAT master library, is affected by a memory overflow flaw in its multi-segment data transfer handling. A malicious device on the network could potentially use this flaw to run its own code, and the advisory does not state a fix or vendor recommendation. Technical summary The flaw is a buffer overflow in multi-segment data transfers. The software checks the total declared size only once at the start of a transfer and does not track cumulative size as later segments arrive, so an attacker-controlled device can declare a small initial size and then send segments that write controlled data past the allocated buffer, potentially enabling code execution. Affected versions are stated as SOEM 2.0.0 and earlier. The advisory does not state any fixed version, workaround, detection guidance, CVSS score, or evidence of exploitation in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects RT-Labs AB SOEM RT-Labs AB SOEM SOEM NIST National Vulnerability DatabasePublished Oct 26, 2026 09:16 UTC Read the advisory
	Medium	6.5	CVE-2026-82943	SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended... RT-Labs AB, SOEMRT-Labs AB SOEM, SOEM	NVD	Oct 26 09:16 UTC
CVE-2026-82943SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended... Executive summary SOEM, an open-source EtherCAT master library, has vulnerabilities in version 2.0.0 and earlier that let a malicious device make the master read memory beyond its intended buffer. The advisory says an attacker could use this to extract up to 64KB of data from the master's memory. The advisory does not state a severity rating or a vendor fix. Technical summary The flaw is an out-of-bounds read caused by the software trusting length values in device responses without checking them against actual buffer sizes. The attack vector is a malicious device on the network sending crafted messages to the master. The advisory states that affected versions are 2.0.0 and earlier. Fixed versions are not stated. Workarounds are not stated. Detection guidance is not stated. No CVSS score is given in the advisory text. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affects RT-Labs AB SOEM RT-Labs AB SOEM SOEM NIST National Vulnerability DatabasePublished Oct 26, 2026 09:16 UTC Read the advisory
	High	8.3	CVE-2026-70388	SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside... RT-Labs AB, SOEMRT-Labs AB SOEM, SOEM	NVD	Oct 26 09:16 UTC
CVE-2026-70388SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside... Executive summary SOEM, an open-source EtherCAT master library, is affected by vulnerabilities in version 2.0.0 and earlier. A malicious device on the network can send crafted messages that may let an attacker run code on the master system, so the advisory treats this as serious. The advisory does not state a vendor fix or recommended action beyond the description given. Technical summary The flaw is a memory safety issue, likely an out-of-bounds write, caused by unvalidated arithmetic on message length values that lets negative or extremely large values bypass checks. The attack requires a malicious device on the network that sends specially crafted messages to the master. The advisory says memory corruption could lead to arbitrary code execution. Affected versions are stated as 2.0.0 and earlier; a fixed version is not stated. Workarounds and detection guidance are not stated, and exploitation status and CVSS score are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityLow IntegrityHigh AvailabilityHigh How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H Affects RT-Labs AB SOEM RT-Labs AB SOEM SOEM NIST National Vulnerability DatabasePublished Oct 26, 2026 09:16 UTC Read the advisory
	High	7.1	CVE-2026-82358	RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src/co_sdo_server.c' that fails to properly validate write... RT-Labs ABRT-Labs AB C-Open	NVD	Oct 1 20:17 UTC
CVE-2026-82358RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src/co_sdo_server.c' that fails to properly validate write... From the advisory RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src/co_sdo_server.c' that fails to properly validate write permissions when processing download-segment frames. An unauthenticated attacker on the CAN bus can initiate an SDO upload for a read-only Object Dictionary (OD) entry, which sets a data pointer to the read-only object, then send download-segment frames to write to that memory location. The download-segment handler does not verify that a download session is active, allowing any CANopen node to overwrite read-only OD entries using two SDO frames. Note that CANopen protocol operates over CAN bus and does not provide built-in authentication mechanisms. Fixed in 1.1.1. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityNone How it is exploited Attack vector Adjacent network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects RT-Labs AB RT-Labs AB C-Open NIST National Vulnerability DatabasePublished Oct 1, 2026 20:17 UTC Read the advisory
	High	7.1	CVE-2026-82357	RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device RT-Labs ABRT-Labs AB C-Open	NVD	Oct 1 20:17 UTC
CVE-2026-82357RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device From the advisory RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromised node for instance, can initiate the LSS protocol on a device with a misconfigured identity object and potentially crash the device. Fixed in 1.1.1. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Adjacent network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects RT-Labs AB RT-Labs AB C-Open NIST National Vulnerability DatabasePublished Oct 1, 2026 20:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects