CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Gladinet CentreStack Remote Code Execution (RCE) Vulnerability via Hardcoded machineKey (CVE-2025-30406) Critical Security Advisory
[Affected Scope] Gladinet CentreStack versions through 16.1.10296.56315
[Impact] Unauthenticated remote code execution (RCE) via deserialization of malicious payloads using the hardcoded machineKey, actively exploited in the wild
[Mitigation] Immediately upgrade to version 16.4.10315.56368 or later, or manually delete/rotate the hardcoded machineKey in the portal web.config file
Rockwell Automation Studio 5000 & RSLogix 5000 Hardcoded Cryptographic Key Vulnerability (CVE-2021-22681) Technical Advisory
[Affected Scope] Rockwell Automation Studio 5000 Logix Designer v21 and later, RSLogix 5000 v16 through v20, and associated Logix controllers
[Impact] Unauthenticated remote attackers can obtain the hardcoded cryptographic key, bypass verification mechanisms, and gain unauthorized access to modify controller logic or configurations
[Mitigation] Implement network segmentation, restrict EtherNet/IP ports, transition controller keyswitches to 'Run' mode, and deploy CIP Security where applicable