est. 2017
Supporting OT/ICS Security.
#CVE #CSAF #Advisory #OT
We are the #CNA for:
365FarmNet, ads-tec Industrial IT, AKG, AMX, Auma, Beckhoff, Bender, Bucher Automation, Carlo Gavazzi Controls, CLAAS, Codesys, Dräger, DURAG, Endress+Hauser, Etherwan Systems, Euchner, Festo, Festo Didactic, Frauscher, Futronic, GEA, Harman International, Helmholz, Hilscher, HIMA, HYDAC, HYDAC Electronic GmbH, HYDAC Software GmbH, HYDAC Filter Systems GmbH, TTControl, ifm, Innominate, JBL, Jetter, JUMO, K4 DIGITAL, KEB, Kendrion, KEBA, KROHNE, KUKA, KUHNKE, Lenze, M&M Software, MB connect line, Miele, Murrelek
🔄 CSAF advisory updated (version 2.0.0)
VDE-2026-094
CODESYS Gateway Client - Uncontrolled Memory Allocation
CVE-2026-76992
Changes: Updated remediation category - fixed SL runtimes are now available, updated summary - typo corrected, formal adaptions.
HTML: https://www.certvde.com/en/advisories/VDE-2026-094/
CSAF JSON: https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-11_vde-2026-094.json
certvde.comCODESYS Gateway Client - Uncontrolled Memory Allocation
🔄 CSAF advisory updated (version 1.1.0)
VDE-2026-097
CODESYS Control Runtime - Improper Synchronization in Monitoring
CVE-2026-79625
Changes: Updated remediation category - fixed SL runtimes are now available, formal adaptions.
HTML: https://www.certvde.com/en/advisories/VDE-2026-097/
CSAF JSON: https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-12_vde-2026-097.json
certvde.comCODESYS Control Runtime - Improper Synchronization in Monitoring
🔒 New CSAF advisory published
VDE-2026-112
METTLER TOLEDO: STARe Software DB2 vulnerable component
CVE-2026-10109
A vulnerability identified as CVE-2026-10109 affects the external component IBM Db2 12.1.2 delivered with STARe v20.00. The vulnerability is associated with improper handling of the pre-authentication DRDA handsha…
HTML: https://certvde.com/en/advisories/VDE-2026-112/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-112.json
certvde.comMETTLER TOLEDO: STARe Software DB2 vulnerable component