CVE-2026-63356

Vendor

Oracle

Product

java

CVSS

6.1

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 9d ago

   Siemens SIMATIC S7 PLCs Web Server

   SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s…

   CVSS 3.1 No fix yet CVE-2026-63350CVE-2026-63351CVE-2026-63352+5 more Siemens
2. 3
   CVE NVD 19d ago

   Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on…

   Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user…

   CVSS 6.1 CVE-2026-63356 Oracle