Advisories
Siemens WinCC
How we can helpFree trust check →
Source: CISA (US) ↗Security news
Official advisories,
every morning.
We collect announcements from CISA (US) and the NCSC (UK) every morning at 9:00 JST and add the countermeasures we can help with. Always check the original announcement for the full details. Advisories from Japanese public bodies are on the Japanese page.
Advisories
Siemens SENTRON 3NA COM Fuse
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens RUGGEDCOM CROSSBOW
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens SIMATIC S7 PLCs Web Server
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens RUGGEDCOM APE1808 Devices
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens Industrial Edge Device Kit
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens SIMATIC S7-1500 TM MFP
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens Capital Embedded AR Classic
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
InterSystems Corporation InterSystems IRIS for Health
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens SIMATIC IPCs
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens Software Center
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Critical security issue affecting PHP
How we can helpPHP response menu →PHP Emergency Inspection report (¥4,980) →Temporary WAF protection →
Source: NCSC (UK) ↗AdvisoriesAI-related
Introducing a new AI chapter in the NCSC research problem book
Source: NCSC (UK) ↗Vulnerabilities
CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition — EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96656: Plex Media Server — Plex Media Server External Control of File Name or Path Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96655: Plex Media Server — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96654: Plex Media Server — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96652: Plex Media Server — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-110936: Siemens Software Center — Siemens Software Center Uncontrolled Search Path Element Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-102764: BeyondTrust Remote Support — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2025-61624: Fortinet Multiple Products — Fortinet Multiple Products Path Traversal Vulnerability
Source: CISA KEV ↗Advisories
Using TLS to protect data
Source: NCSC (UK) ↗Standards & guidance
Post-quantum updates to our TLS guidance
Source: NCSC (UK) ↗Vulnerabilities
CVE-2026-21589: Atlassian Multiple Products — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-105134: Ahsay AhsayCBS — Ahsay AhsayCBS Command Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-76519: Cisco Secure Email Gateway — Cisco Secure Email Gateway Relative Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-105133: Ahsay AhsayCBS — Ahsay AhsayCBS Improper Authentication Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-0322: Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Code Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities