PULSEUnderground Intel

EN VIVO14señales / 24h

FEED

ransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a hitech group · US · Technologyransomqilin reclama a Shibata Co., Ltd. · JP · Manufacturingransomqilin reclama a Meshbesher & Spence · US · Professional Servicesransomqilin reclama a BKV Vasúti Jármjavító Kft · HU · Transportationransomqilin reclama a Forum · AT · Professional Servicesransomqilin reclama a Select Community Management · US · Professional Servicesransomqilin reclama a CMD Naturkosmetik · DE · Retail & E-Commerceransomqilin reclama a qc-consult · DE · Professional Servicesransombarracuda reclama a EVINOKS · TR · Technologyransomqilin reclama a Danser · US · Otherransomvexy ransomware reclama a System Soft · BG · Technologyransomvexy ransomware reclama a JHAMF Group · BDransomemperador reclama a Punta Shopping · BR · Retail & E-Commerceransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a hitech group · US · Technologyransomqilin reclama a Shibata Co., Ltd. · JP · Manufacturingransomqilin reclama a Meshbesher & Spence · US · Professional Servicesransomqilin reclama a BKV Vasúti Jármjavító Kft · HU · Transportationransomqilin reclama a Forum · AT · Professional Servicesransomqilin reclama a Select Community Management · US · Professional Servicesransomqilin reclama a CMD Naturkosmetik · DE · Retail & E-Commerceransomqilin reclama a qc-consult · DE · Professional Servicesransombarracuda reclama a EVINOKS · TR · Technologyransomqilin reclama a Danser · US · Otherransomvexy ransomware reclama a System Soft · BG · Technologyransomvexy ransomware reclama a JHAMF Group · BDransomemperador reclama a Punta Shopping · BR · Retail & E-Commerce

← Todos los CVEs

CVE Watch23 oct 2026

CVE-2025-40818

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS

CVSS

3.3

Bajo

EPSS

0.1%

p1

KEV

—

Exploit Today

0

0-100

Publicado: 9 dic 2025 · Última mod.: 23 oct 2026 · CWE-732

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-032026-10-31

Descripción técnica

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impersonate the server potentially enabling man-in-the-middle, traffic decryption or unauthorized access to services that trust these certificates.

Referencias oficiales

cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-626856.html

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1114995.5 MED

——1Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.2d CVE-2026-118574—

——1Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0.2d CVE-2026-1070609.1 CRÍ

——6Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.2d CVE-2026-1070557.5 ALT

——5Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.2d CVE-2026-1070477.5 ALT

——11Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.2d CVE-2026-1070447.5 ALT

——7Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.2d