https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T08:02:12.669490+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-85114 fkie_cve-2026-85114 2026-10-14T08:02:12.689632+00:00

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.

 https://db.gcve.eu/vuln/ncsc-2026-0415 NCSC-2026-0415 — Kwetsbaarheden verholpen in Siemens-producten 2026-10-14T08:02:12.689701+00:00 NCSC-2026-0415 https://db.gcve.eu/vuln/ssa-390352 SSA-390352 — SSA-390352: Multiple Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API 2026-10-14T08:02:12.689754+00:00

.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory.

Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.