{"generated_at":"2026-10-23T22:47:22.118Z","count":8,"incidents":[{"id":"siemens-sentron-3na-com-fuse-denial-of-service-vulnerabi-cve-2024-7322","url":"https://pwned.coffee/i/siemens-sentron-3na-com-fuse-denial-of-service-vulnerabi-cve-2024-7322","title":"Siemens SENTRON 3NA COM Fuse Denial-of-Service Vulnerability","summary":"Siemens SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability that could allow an attacker to trigger a denial-of-service condition.","severity":"medium","brew":{"name":"Americano","temp":"183°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"status":"live","exploited":true,"public_poc":false,"kev_due":null,"do":"Restrict network access to the Siemens SENTRON 3NA COM Fuse and monitor it for denial-of-service outages.","affected":"Siemens SENTRON 3NA COM Fuse","fixed_versions":[],"ids":["CVE-2024-7322"],"stack":["ics"],"first_seen":"2026-10-22T12:00:00.000Z","updated_at":"2026-10-22T12:00:00.000Z"},{"id":"siemens-software-center-uncontrolled-search-path-element-cve-2026-110936","url":"https://pwned.coffee/i/siemens-software-center-uncontrolled-search-path-element-cve-2026-110936","title":"Siemens Software Center Uncontrolled Search Path Element Vulnerability","summary":"Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"live","exploited":true,"public_poc":false,"kev_due":"2026-11-03","do":"Apply the available Siemens Software Center fix now, since this DLL search path flaw is being exploited.","affected":"Siemens Software Center","fixed_versions":[],"ids":["CVE-2026-110936"],"stack":["ics"],"first_seen":"2026-10-20T12:00:00.000Z","updated_at":"2026-10-23T16:20:13.674Z"},{"id":"rockwell-multiple-products-insufficient-protected-creden-cve-2021-22681","url":"https://pwned.coffee/i/rockwell-multiple-products-insufficient-protected-creden-cve-2021-22681","title":"Rockwell Multiple Products Insufficient Protected Credentials Vulnerability","summary":"Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software.","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"past","exploited":true,"public_poc":false,"kev_due":null,"do":null,"affected":"Rockwell Multiple Products","fixed_versions":[],"ids":["CVE-2021-22681"],"stack":["ics"],"first_seen":"2026-03-05T12:00:00.000Z","updated_at":"2026-03-05T12:00:00.000Z"},{"id":"siemens-simatic-s7-1500-tm-mfp-vulnerabilities","url":"https://pwned.coffee/i/siemens-simatic-s7-1500-tm-mfp-vulnerabilities","title":"Siemens SIMATIC S7-1500 TM MFP Vulnerabilities","summary":"Multiple vulnerabilities identified in Siemens SIMATIC S7-1500 TM MFP's GNU/Linux subsystem, affecting all versions.","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"unpatched","bucket":"nofix","kitchen":{"name":"86'd","plain":"No fix yet"},"status":"live","exploited":false,"public_poc":false,"kev_due":null,"do":"Restrict network access to the Siemens SIMATIC S7-1500 TM MFP and watch for a vendor fix.","affected":"Siemens SIMATIC S7-1500 TM MFP","fixed_versions":[],"ids":[],"stack":["ics"],"first_seen":"2026-10-22T12:00:00.000Z","updated_at":"2026-10-22T12:00:00.000Z"},{"id":"siemens-simatic-s7-plcs-web-server-vulnerabilities","url":"https://pwned.coffee/i/siemens-simatic-s7-plcs-web-server-vulnerabilities","title":"Siemens SIMATIC S7 PLCs Web Server Vulnerabilities","summary":"Siemens SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations.","severity":"critical","brew":{"name":"Hell brew","temp":"540°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"status":"live","exploited":false,"public_poc":false,"kev_due":null,"do":"Restrict network access to the S7-1500 web server and watch for a Siemens fix.","affected":"Siemens SIMATIC S7 PLCs Web Server","fixed_versions":[],"ids":["CVE-2026-63350","CVE-2026-63351","CVE-2026-63352","CVE-2026-63353","CVE-2026-63354","CVE-2026-63355","CVE-2026-63356","CVE-2026-63357"],"stack":["ics"],"first_seen":"2026-10-22T12:00:00.000Z","updated_at":"2026-10-22T12:00:00.000Z"},{"id":"siemens-industrial-edge-app-publisher-vulnerability","url":"https://pwned.coffee/i/siemens-industrial-edge-app-publisher-vulnerability","title":"Siemens Industrial Edge App Publisher Vulnerability","summary":"Siemens Industrial Edge App Publisher contains a vulnerability chain that could allow an attacker to impersonate the management server and execute arbitrary code on the local machine.","severity":"critical","brew":{"name":"Hell brew","temp":"540°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"live","exploited":false,"public_poc":false,"kev_due":null,"do":null,"affected":"Siemens Industrial Edge App Publisher","fixed_versions":[],"ids":["CVE-2026-78556","CVE-2026-78557"],"stack":["ics"],"first_seen":"2026-10-22T12:00:00.000Z","updated_at":"2026-10-22T12:00:00.000Z"},{"id":"siemens-ruggedcom-crossbow-vulnerability","url":"https://pwned.coffee/i/siemens-ruggedcom-crossbow-vulnerability","title":"Siemens RUGGEDCOM CROSSBOW Vulnerability","summary":"RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database.","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"live","exploited":false,"public_poc":false,"kev_due":null,"do":null,"affected":"Siemens RUGGEDCOM CROSSBOW","fixed_versions":[],"ids":["CVE-2025-6965","CVE-2025-70873","CVE-2025-71316","CVE-2026-11822","CVE-2026-11824","CVE-2026-33387","CVE-2026-33388","CVE-2026-33389","CVE-2026-33391","CVE-2026-33920","CVE-2026-89196","CVE-2026-89197","CVE-2026-89198","CVE-2026-89199","CVE-2026-89200","CVE-2026-89201","CVE-2026-89202","CVE-2026-89203","CVE-2026-89204","CVE-2026-89205","CVE-2026-89206"],"stack":["ics"],"first_seen":"2026-10-22T12:00:00.000Z","updated_at":"2026-10-22T12:00:00.000Z"},{"id":"siemens-wincc-database-privilege-escalation-vulnerabilit-cve-2026-59241","url":"https://pwned.coffee/i/siemens-wincc-database-privilege-escalation-vulnerabilit-cve-2026-59241","title":"Siemens WinCC Database Privilege Escalation Vulnerability","summary":"Siemens WinCC is affected by a database privilege escalation vulnerability that could allow an authenticated user to execute commands on the underlying host system.","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"live","exploited":false,"public_poc":false,"kev_due":null,"do":null,"affected":"Siemens WinCC","fixed_versions":[],"ids":["CVE-2026-59241"],"stack":["ics"],"first_seen":"2026-10-22T12:00:00.000Z","updated_at":"2026-10-22T12:00:00.000Z"}]}