CVE-2026-63353

Vendor

Oracle

Product

java

CVSS

9.6

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 9d ago

   Siemens SIMATIC S7 PLCs Web Server

   SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s…

   CVSS 3.1 No fix yet CVE-2026-63350CVE-2026-63351CVE-2026-63352+5 more Siemens
2. 18
   CVE NVD 18d ago

   Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.

   Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right…

   CVSS 9.6 CVE-2026-63353 Oracle