| 504970 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52858) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504975 | Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2025-52429) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504976 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52866) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504979 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52854) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504981 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52862) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504984 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-48726) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504986 | Qnap QTS and QuTS hero Improper Limitation of a Pathname to a Restricted Directory (CVE-2025-47211) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504987 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52424) | Tenable OT Security | Tenable.ot | 2026/1/16 | 2026/2/6 | medium |
| 504995 | Synology DiskStation Manager Cross-Site Request Forgery (CVE-2024-45538) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | critical |
| 505000 | Qnap QTS and QuTS hero Improper Limitation of a Pathname to a Restricted Directory (CVE-2023-51364) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | high |
| 505001 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2023-34980) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | high |
| 505002 | Qnap QTS and QuTS hero Improper Neutralization of Argument Delimiters in a Command (CVE-2025-62847) | Tenable OT Security | Tenable.ot | 2026/1/19 | 2026/2/5 | high |
| 505011 | Qnap QTS and QuTS hero Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2025-9110) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505013 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52431) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505018 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53590) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505019 | Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2025-53591) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505020 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53405) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505023 | Qnap QTS and QuTS hero Out-of-bounds Read (CVE-2025-54165) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505024 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53596) | Tenable OT Security | Tenable.ot | 2026/1/20 | 2026/2/4 | medium |
| 505036 | Konica Bizhub Multifunction Printers Server-Side Request Forgery (CVE-2024-51981) | Tenable OT Security | Tenable.ot | 2026/1/21 | 2026/2/4 | medium |
| 505038 | Konica Bizhub Multifunction Printers Insufficiently Protected Credentials (CVE-2024-51984) | Tenable OT Security | Tenable.ot | 2026/1/21 | 2026/2/4 | medium |
| 505050 | EndRun Technologies Sonoma Cross-Site Request Forgery (CVE-2025-60956) | Tenable OT Security | Tenable.ot | 2026/2/3 | 2026/2/4 | high |
| 505058 | Siemens SCALANCE and RUGGEDCOM Generation of Predictable Numbers or Identifiers (CVE-2025-10148) | Tenable OT Security | Tenable.ot | 2026/2/4 | 2026/3/5 | medium |
| 505063 | EPSON WF-2750 Origin Validation Error (CVE-2018-14903) | Tenable OT Security | Tenable.ot | 2026/2/5 | 2026/2/6 | high |
| 505064 | EPSON Printers Improper Input Validation (CVE-2023-38556) | Tenable OT Security | Tenable.ot | 2026/2/5 | 2026/2/6 | high |
| 505068 | EPSON WF-2861 Missing Authentication for Critical Function (CVE-2018-19248) | Tenable OT Security | Tenable.ot | 2026/2/5 | 2026/4/21 | critical |
| 505070 | EPSON WF-2750 Improper Neutralization of Input During Web Page Generation (CVE-2018-14899) | Tenable OT Security | Tenable.ot | 2026/2/5 | 2026/2/6 | medium |
| 505071 | EPSON Printers Cross-site Scripting (CVE-2023-23572) | Tenable OT Security | Tenable.ot | 2026/2/5 | 2026/2/6 | medium |
| 505073 | EPSON Printers HTTP Request/Response Splitting (CVE-2018-0689) | Tenable OT Security | Tenable.ot | 2026/2/5 | 2026/2/6 | high |
| 505093 | Siemens S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2025-3198) | Tenable OT Security | Tenable.ot | 2026/2/10 | 2026/2/11 | medium |
| 505100 | Siemens S7-1500 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2025-5244) | Tenable OT Security | Tenable.ot | 2026/2/10 | 2026/2/11 | medium |
| 505106 | Siemens SCALANCE and RUGGEDCOM Buffer Over-read (CVE-2024-6874) | Tenable OT Security | Tenable.ot | 2026/2/10 | 2026/3/5 | medium |
| 505107 | Siemens SCALANCE and RUGGEDCOM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVE-2025-4138) | Tenable OT Security | Tenable.ot | 2026/2/10 | 2026/3/5 | high |
| 505111 | Siemens SCALANCE and RUGGEDCOM Improper Certificate Validation (CVE-2024-47619) | Tenable OT Security | Tenable.ot | 2026/2/10 | 2026/3/5 | high |
| 505116 | Siemens SCALANCE and RUGGEDCOM Out-of-bounds Write (CVE-2022-48174) | Tenable OT Security | Tenable.ot | 2026/2/10 | 2026/3/5 | critical |
| 505147 | Siemens SIMATIC S7-1500 Missing Cryptographic Step (CVE-2025-69418) | Tenable OT Security | Tenable.ot | 2026/2/13 | 2026/2/16 | medium |
| 505152 | Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2025-39756) | Tenable OT Security | Tenable.ot | 2026/2/16 | 2026/7/17 | medium |
| 505154 | Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2025-39683) | Tenable OT Security | Tenable.ot | 2026/2/16 | 2026/7/17 | high |
| 505157 | Siemens SIMATIC S7-1500 Uncontrolled Recursion (CVE-2025-38614) | Tenable OT Security | Tenable.ot | 2026/2/16 | 2026/7/17 | medium |
| 505169 | Siemens SIMATIC S7-1500 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2025-39697) | Tenable OT Security | Tenable.ot | 2026/2/16 | 2026/7/17 | medium |
| 505170 | Siemens SIMATIC S7-1500 Missing Release of Resource after Effective Lifetime (CVE-2025-38721) | Tenable OT Security | Tenable.ot | 2026/2/16 | 2026/7/17 | medium |
| 505187 | FLIR Systems AX8 Cameras OS Command Injection (CVE-2022-37061) | Tenable OT Security | Tenable.ot | 2026/2/19 | 2026/4/21 | critical |
| 505189 | FLIR Systems AX8 Cameras Path Traversal (CVE-2023-51127) | Tenable OT Security | Tenable.ot | 2026/2/19 | 2026/2/20 | high |
| 505198 | SonicWALL SonicOS Exposure of Sensitive Information to an Unauthorized Actor (CVE-2022-22277) | Tenable OT Security | Tenable.ot | 2026/2/24 | 2026/2/25 | medium |
| 505204 | Sony IP Cameras Exposure of Sensitive Information to an Unauthorized Actor (CVE-2016-7834) | Tenable OT Security | Tenable.ot | 2026/3/3 | 2026/3/4 | high |
| 505207 | Hitachi Energy RTU500 Product Incomplete List of Disallowed Inputs (CVE-2026-1773) | Tenable OT Security | Tenable.ot | 2026/3/4 | 2026/6/17 | high |
| 505212 | Moxa VPort Cameras Out-of-bounds Read (CVE-2021-25848) | Tenable OT Security | Tenable.ot | 2026/3/6 | 2026/3/9 | critical |
| 505223 | SonicWALL SonicOS NULL Pointer Dereference (CVE-2026-0401) | Tenable OT Security | Tenable.ot | 2026/3/10 | 2026/3/11 | medium |
| 505234 | Siemens APE1808 Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2025-4614) | Tenable OT Security | Tenable.ot | 2026/3/23 | 2026/3/24 | medium |
| 505239 | Siemens APE1808 Improper Neutralization of CRLF Sequences in HTTP Headers (CVE-2024-54021) | Tenable OT Security | Tenable.ot | 2026/3/23 | 2026/4/1 | medium |
