{"dataType":"CVE_RECORD","dataVersion":"5.0","cveMetadata":{"cveId":"GCVE-110-NCSC-2026-479","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-11-11T10:15:57Z","dateUpdated":"","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"nl","value":"Multiple versions of SIMATIC software are vulnerable to NTLM relay attacks allowing unauthenticated remote attackers to impersonate users and potentially impact services such as SQL servers used by WinCC.","supportingMedia":null},{"lang":"nl","value":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","supportingMedia":null},{"lang":"nl","value":"A Double Free vulnerability in Fortinet FortiOS, FortiProxy, and FortiSwitch allows a local authenticated attacker to crash the newcli daemon using crafted CLI commands.","supportingMedia":null},{"lang":"nl","value":"ROS# versions prior to V2.3.1 improperly escape text in message definition files, allowing attackers to inject arbitrary code into generated programs via crafted files.","supportingMedia":null},{"lang":"nl","value":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","supportingMedia":null},{"lang":"nl","value":"A vulnerability in meta-iot2050 (versions \u003e= V01.03.01) allows attackers who can manipulate the device's configuration file to execute arbitrary code due to lack of execution checks on configuration file parts.","supportingMedia":null},{"lang":"nl","value":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","supportingMedia":null},{"lang":"nl","value":"Multiple out-of-bounds write vulnerabilities in Google and Node.js Brotli decoders across various versions allow remote code execution, memory corruption, denial of service, and data disclosure.","supportingMedia":null},{"lang":"nl","value":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","supportingMedia":null},{"lang":"nl","value":"Mendix Studio Pro versions 11.12.6 to 11.16.0 have a vulnerability where the MCP Server's HTTP listener is not restricted to the loopback interface, allowing remote attackers with network access to interact with the server.","supportingMedia":null},{"lang":"nl","value":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","supportingMedia":null},{"lang":"nl","value":"Mendix Studio Pro versions 11.12.6 to 11.12.7 and 11.15.0 to 11.16.0, including the MCP Server, are vulnerable to Cross-Site Request Forgery due to improper validation of Content-Type and Origin headers on HTTP requests.","supportingMedia":null},{"lang":"nl","value":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","supportingMedia":null}],"references":[{"url":"https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0479.json","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-045512.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-242944.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-435267.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-443410.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-651988.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-678870.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-710379.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-724261.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-898633.html","name":"","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-970803.html","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-58114.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-106175.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-109097.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-109830.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-111497.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112136.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112137.json","name":"","tags":["advisory"]}],"metrics":[{"format":"","scenarios":null,"cvssV2_0":null,"cvssV3_0":null,"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM"},"cvssV4_0":null,"other":null}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Weak Authentication","cweId":"CWE-1390","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Double Free","cweId":"CWE-415","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Control of Generation of Code","cweId":"CWE-94","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Neutralization of Special Elements used in an OS Command","cweId":"CWE-78","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Out-of-bounds Write","cweId":"CWE-787","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Binding to an Unrestricted IP Address","cweId":"CWE-1327","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Cross-Site Request Forgery","cweId":"CWE-352","type":"CWE"}]}],"affected":[{"vendor":"Siemens","product":"vers:unknown/*","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null,"x_vulnetix_aliases":{"direct":["CVE-2026-106175","CVE-2026-109097","CVE-2026-109830","CVE-2026-111497","CVE-2026-112136","CVE-2026-112137","CVE-2026-58114"]}},"adp":null}}