Skip to content

Product

Siemens Sifinity Setup vulnerabilities

3 published CVES affecting Siemens Sifinity Setup, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
3
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
3

Latest Siemens Sifinity Setup CVEs

Newest publication first

  1. CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder

    Published
    CriticalCVSS 9.2 EPSS 82.6% CISA KEV added 2026-10-27 Exploited in the wild PoC

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service,...

  2. CVE-2026-109619 RCE via stale global state

    Published
    CriticalCVSS 9.2 EPSS 100.0% CISA KEV added 2026-10-26 Exploited in the wild PoC

    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may r...

  3. CVE-2026-109618 RCE via OOM corruption

    Published
    CriticalCVSS 9.2 EPSS 100.0% CISA KEV added 2026-10-26 Exploited in the wild Public exploit PoC

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cle...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.