https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 11:44:18 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-85114 <p>A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions &lt; V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.</p> <p>A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions &lt; V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.</p> https://db.gcve.eu/vuln/fkie_cve-2026-85114 https://db.gcve.eu/vuln/ncsc-2026-0415 NCSC-2026-0415 https://db.gcve.eu/vuln/ncsc-2026-0415 https://db.gcve.eu/vuln/ssa-390352 <p>.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory.</p> <p>Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.</p> <p>.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory.</p> <p>Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.</p> https://db.gcve.eu/vuln/ssa-390352