SS
Product
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
On CISA KEVExploited in the wild
1,107
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 85High 414Medium 1Low 0
Watch
Add SIPLUS S7-1500 CPU 1518-4 PN/DP MFP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23343 | 7.8 | Mar 25 | xdp: produce a warning when calculated tailroom is negative Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23340 | 7.8 | Mar 25 | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23319 | 7.8 | Mar 25 | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23274 | 7.8 | Mar 20 | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23273 | 7.8 | Mar 20 | macvlan: observe an RCU grace period in macvlan_common_newlink() error path Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23271 | 7.8 | Mar 20 | perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23270 | 7.8 | Mar 18 | net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23245 | 7.8 | Mar 18 | net/sched: act_gate: snapshot parameters with RCU on replace Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23243 | 7.8 | Mar 18 | RDMA/umad: Reject negative data_len in ib_umad_write Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23231 | 7.8 | Mar 4 | netfilter: nf_tables: fix use-after-free in nf_tables_addchain() Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23111 | 7.8 | Feb 13 | netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23083 | 7.8 | Feb 4 | fou: Don't allow 0 for FOU_ATTR_IPPROTO. Affected: V3.1.6; V3.1.7 |
| CVE-2026-23010 | 7.8 | Jan 25 | ipv6: Fix use-after-free in inet6_addr_del(). Affected: V3.1.6; V3.1.7 |
| CVE-2025-71162 | 7.8 | Jan 25 | dmaengine: tegra-adma: Fix use-after-free Affected: V3.1.6; V3.1.7 |
| CVE-2026-22980 | 7.8 | Jan 23 | nfsd: provide locking for v4_end_grace Affected: V3.1.6; V3.1.7 |
| CVE-2025-71123 | 7.8 | Jan 14 | ext4: fix string copying in parse_apply_sb_mount_options() Affected: V3.1.6; V3.1.7 |
| CVE-2025-71086 | 7.8 | Jan 13 | net: rose: fix invalid array index in rose_kill_by_device() Affected: V3.1.6; V3.1.7 |
| CVE-2025-71075 | 7.8 | Jan 13 | scsi: aic94xx: fix use-after-free in device removal path Affected: V3.1.6; V3.1.7 |
| CVE-2025-68764 | 7.8 | Jan 5 | NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags Affected: V3.1.6; V3.1.7 |
| CVE-2025-68724 | 7.8 | Dec 24 | crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Affected: V3.1.6; V3.1.7 |
| CVE-2025-68265 | 7.8 | Dec 16 | nvme: fix admin request_queue lifetime Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2025-40149 | 7.8 | Nov 12 | tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). Affected: V3.1.6; V3.1.7 |
| CVE-2025-40105 | 7.8 | Oct 30 | vfs: Don't leak disconnected dentries on umount Affected: V3.1.6; V3.1.7 |
| CVE-2025-39978 | 7.8 | Oct 15 | octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() Affected: V3.1.6; V3.1.7 |
| CVE-2025-39977 | 7.8 | Oct 15 | futex: Prevent use-after-free during requeue-PI Affected: V3.1.5; V3.1.6; V3.1.7 |
| CVE-2025-39955 | 7.8 | Oct 9 | tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). Affected: V3.1.6; V3.1.7 |
| CVE-2025-11083 | 7.8 | Sep 27 | GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow Affected: V3.1.5 |
| CVE-2025-11082 | 7.8 | Sep 27 | GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow Affected: V3.1.5 |
| CVE-2025-39871 | 7.8 | Sep 23 | dmaengine: idxd: Remove improper idxd_free Affected: V3.1.6; V3.1.7 |
| CVE-2025-39866 | 7.8 | Sep 19 | fs: writeback: fix use-after-free in __mark_inode_dirty() Affected: V3.1.5; V3.1.6; V3.1.7 |
| CVE-2025-39783 | 7.8 | Sep 11 | PCI: endpoint: Fix configfs group list head handling Affected: V3.1.5 |
| CVE-2025-39691 | 7.8 | Sep 5 | fs/buffer: fix use-after-free when call bh_read() helper Affected: V3.1.6; V3.1.7 |
| CVE-2025-39689 | 7.8 | Sep 5 | ftrace: Also allocate and copy hash for reading of filter files Affected: V3.1.5 |
| CVE-2025-38724 | 7.8 | Sep 4 | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Affected: V3.1.5 |
| CVE-2025-38708 | 7.8 | Sep 4 | drbd: add missing kref_get in handle_write_conflicts Affected: V3.1.5 |
| CVE-2025-38704 | 7.8 | Sep 4 | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2025-38702 | 7.8 | Sep 4 | fbdev: fix potential buffer overflow in do_register_framebuffer() Affected: V3.1.5 |
| CVE-2025-38685 | 7.8 | Sep 4 | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit Affected: V3.1.5 |
| CVE-2025-38471 | 7.8 | Jul 28 | tls: always refresh the queue when reading sock Affected: V3.1.5 |
| CVE-2025-38350 | 7.8 | Jul 19 | net/sched: Always pass notifications when child class becomes empty Affected: V3.1.5 |
| CVE-2025-7546 | 7.8 | Jul 13 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write Affected: V3.1.5 |
| CVE-2025-7545 | 7.8 | Jul 13 | GNU Binutils objcopy.c copy_section heap-based overflow Affected: V3.1.5 |
| CVE-2025-7425 | 7.8 | Jul 10 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Affected: V3.1.5 |
| CVE-2025-38280 | 7.8 | Jul 10 | bpf: Avoid __bpf_prog_ret0_warn when jit fails Affected: V3.1.5 |
| CVE-2025-38236 | 7.8 | Jul 8 | af_unix: Don't leave consecutive consumed OOB skbs. Affected: V3.1.5 |
| CVE-2025-38212 | 7.8 | Jul 4 | ipc: fix to protect IPCS lookups using RCU Affected: V3.1.5 |
| CVE-2025-38201 | 7.8 | Jul 4 | netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2025-38198 | 7.8 | Jul 4 | fbcon: Make sure modelist not set on unregistered console Affected: V3.1.5 |
| CVE-2025-38079 | 7.8 | Jun 18 | crypto: algif_hash - fix double free in hash_accept Affected: V3.1.5 |
| CVE-2025-5245 | 7.8 | May 27 | GNU Binutils objdump debug.c debug_type_samep memory corruption Affected: V3.1.5 |
The 500 most important CVEs for this product (exploited first, then by severity)