CyberSecBulletin

Wind River Systems vulnerabilities

We track 2 vulnerabilities in Wind River Systems products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.

2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score

Latest Wind River Systems vulnerabilities

  • 8.8 High severity

    VxWorks 7: Improper Privilege Management

    CVE-2026-104018Wind River Systems

    An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluated without the privilege check that is

  • 7.8 High severity

    VxWorks 7: Out-of-bounds Write

    CVE-2026-102004Wind River Systems

    Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09