Siemens Ruggedcom APE1808 vulnerabilities

13 CVEs affecting Siemens Ruggedcom APE1808, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0310, published 2026-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-84392, published 2026-09-08. Low severity, CVSS 2.7. EPSS: 1.1% chance of exploitation in the next 30 days. A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions,…
CVE-2026-0309, published 2026-09-10. Medium severity, CVSS 4.0. EPSS: 0.5% chance of exploitation in the next 30 days. A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to…
CVE-2026-0310, published 2026-09-10. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane…
CVE-2026-33388, published 2026-09-08. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view…
CVE-2026-33391, published 2026-09-08. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can…
CVE-2025-40897, published 2026-04-15. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An…
CVE-2025-40899, published 2026-04-15. High severity, CVSS 8.9. EPSS: 0.3% chance of exploitation in the next 30 days. A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter. An authenticated user with custom fields privileges…
CVE-2026-84393, published 2026-09-08. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert…
CVE-2026-0308, published 2026-09-10. Low severity, CVSS 1.1. EPSS: 0.3% chance of exploitation in the next 30 days. A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web…
CVE-2026-33387, published 2026-09-08. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a…

Latest

CVE-2026-33920, published 2026-09-08. Low severity, CVSS 3.5. EPSS: 0.1% chance of exploitation in the next 30 days. A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can…
CVE-2026-33389, published 2026-09-08. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote…