The web interface of factory HMI panels does not require authentication by default; no vendor patch yet.
On some HMI panels, the remote-monitoring service enabled by default accepts commands to read process values and change set points without authentication.
Manipulation and stoppage of production processes is possible; internet-exposed devices are easy to find.
Disable the service, segment the panels in the OT network and grant access only through VPN.
A masking bug in build logs can expose keys defined as environment variables.
CVE-2026-30022A buffer overflow in the network printer’s print-protocol parser; the device may crash or run attacker code.
CVE-2026-30871Authentication can be bypassed on the management interface of corporate SSL-VPN gateways; attackers are actively scanning.
CVE-2026-31842