Ruggedcom Ape1808 Firmware vulnerabilities

13 known vulnerabilities in Ruggedcom Ape1808 Firmware from Siemens. 12 are rated high or critical, and 8 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Palo Alto Networks PAN-OS Code Injection Exploited

  CVE-2026-0322Oct 14, 2026Palo Alto NetworksEPSS 2.15%

  A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this

• 7.5 High severity

  Cloud NGFW: Improper Check for Unusual or Exceptional Conditions

  CVE-2026-0262May 13, 2026Palo Alto Networks

  Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic. Panorama and Cloud NGFW are not i

• 7.2 High severity

  Cloud NGFW: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-0261May 13, 2026Palo Alto NetworksEPSS 1.4%

  Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the

• 9.1 Critical severity

  Cloud NGFW: Server-Side Request Forgery

  CVE-2026-0258May 13, 2026Palo Alto Networks

  A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS

• 9.1 Critical severity

  Palo Alto Networks PAN-OS Authentication Bypass Exploited

  CVE-2026-0257May 13, 2026Palo Alto NetworksEPSS 95.6%

  Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by t

• 8.1 High severity

  Cloud NGFW: Improper Verification of Cryptographic Signature

  CVE-2026-0265May 13, 2026Palo Alto NetworksEPSS 1.05%

  An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on

• 9.8 Critical severity

  Cloud NGFW: Heap-based Buffer Overflow

  CVE-2026-0264May 13, 2026Palo Alto Networks

  A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Pris

• 9.8 Critical severity

  Palo Alto Networks PAN-OS Out-of-bounds Write Exploited

  CVE-2026-0300May 6, 2026Palo Alto NetworksEPSS 41.7%

  A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls

• 6.5 Medium severity

  Fortinet Multiple Products Path Traversal Exploited

  CVE-2025-61624Apr 14, 2026FortinetEPSS 1.4%

  An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPA

• 9.8 Critical severity

  Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Exploited

  CVE-2026-24858Jan 27, 2026FortinetEPSS 86.6%

  An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiMan

• 9.8 Critical severity

  Fortinet Multiple Products Heap-based Buffer Overflow Exploited

  CVE-2025-25249Jan 13, 2026FortinetEPSS 3.74%

  A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.

• 9.8 Critical severity

  Fortinet Multiple Products Improper Verification of Cryptographic Signature Exploited

  CVE-2025-59718Dec 9, 2025FortinetEPSS 68.1%

  A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10,

• 7.5 High severity

  HTTP/2 Rapid Reset Attack Exploited

  CVE-2023-44487Oct 10, 2023IETFEPSS 100%

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.