CISA on June 4, 2026 republished ABB’s advisory for CVE-2025-11482, a high-severity denial-of-service vulnerability in the OPC-UA server used by B&R PPT30 Operating System versions before 1.8.0 and in version 1.8.0 as an affected baseline now fixed by update guidance. The bug is not a Windows...
CISA published ICSA-26-155-01 on June 4, 2026, warning that NAVTOR NavBox 4.16.1.20 contains hard-coded credentials in its Windows Communication Foundation SOAP implementation, allowing a local authenticated attacker to reach privileged methods if SOAP is enabled. The bug is not a remote...
Siemens has confirmed a temporary denial‑of‑service vulnerability in a broad family of RUGGEDCOM ROS devices that can be triggered by malformed input during the TLS certificate upload procedure of the device web service; operators should treat CVE‑2025‑40935 as a patch‑now advisory and update...