Siemens Ruggedcom APE1808 Firmware vulnerabilities

16 CVEs affecting Siemens Ruggedcom APE1808 Firmware, 7 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0262, published 2026-05-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability, published 2026-05-13. Critical severity, CVSS 9.1. Actively exploited: in CISA KEV since 2026-05-29. EPSS: 96.9% chance of exploitation in the next 30 days. Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized…
CVE-2026-24858: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability, published 2026-01-27. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-01-27. EPSS: 85.8% chance of exploitation in the next 30 days. An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0…
CVE-2025-59718: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability, published 2025-12-09. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2025-12-16. EPSS: 68.3% chance of exploitation in the next 30 days. A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17,…
CVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability, published 2026-05-06. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-05-06. EPSS: 31.7% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code…
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability, published 2026-01-13. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-09-09. EPSS: 3.8% chance of exploitation in the next 30 days. A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions,…
CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability, published 2026-04-14. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2026-10-16. EPSS: 1.1% chance of exploitation in the next 30 days. An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all…
CVE-2026-0261, published 2026-05-13. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be…
CVE-2026-0265, published 2026-05-13. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication…
CVE-2026-0264, published 2026-05-13. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service…

Latest

CVE-2026-0262, published 2026-05-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending…
CVE-2026-0258, published 2026-05-13. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests…
CVE-2026-0256, published 2026-05-13. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This…