Skip to main content
Apexward Pulse
6 reportsPriority Medium

Multiple vulnerabilities disclosed in software and industrial systems

Several vulnerabilities have been disclosed in software and industrial systems, affecting organisations in the UK. These issues could allow attackers to bypass security measures or cause system instability.

First report Latest

What is going on

  • A vulnerability has been discovered in GitLab CE/EE affecting multiple versions, with a fix released on 21 October 2026.
  • A vulnerability has been identified in several Siemens SIMATIC IPC models, potentially allowing attackers to bypass UEFI Secure Boot protections.
  • Multiple APOGEE products have been found to have vulnerabilities in their BACnet and P2 Ethernet components, affecting all versions.
  • A vulnerability has been identified in Capital Embedded AR Classic and Desigo PXC00-E.D products, which could lead to system instability or denial of service.
  • Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user to execute commands on the underlying system.
  • An incident report highlights ransomware attacks targeting NAS devices running outdated DSM versions, with organisations advised to check their exposure.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed