SS
Product
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
On CISA KEVExploited in the wild
1,107
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 85High 414Medium 1Low 0
Watch
Add SIPLUS S7-1500 CPU 1518-4 PN/DP MFP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46323 | 7.8 | Jun 9 | net: gro: don't merge zcopy skbs Affected: V3.1.6; V3.1.7 |
| CVE-2026-46173 | 7.8 | May 28 | exit: prevent preemption of oopsing TASK_DEAD task Affected: V3.1.6; V3.1.7 |
| CVE-2026-46116 | 7.8 | May 28 | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete Affected: V3.1.6; V3.1.7 |
| CVE-2026-46015 | 7.8 | May 27 | tcp: call sk_data_ready() after listener migration Affected: V3.1.6; V3.1.7 |
| CVE-2026-43499 | 7.8 | May 21 | rtmutex: Use waiter::task instead of current in remove_waiter() Affected: V3.1.6; V3.1.7 |
| CVE-2026-43303 | 7.8 | May 8 | mm/page_alloc: clear page->private in free_pages_prepare() Affected: V3.1.6; V3.1.7 |
| CVE-2026-43116 | 7.8 | May 6 | netfilter: ctnetlink: ensure safe access to master conntrack Affected: V3.1.6; V3.1.7 |
| CVE-2026-43033 | 7.8 | May 1 | crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-43030 | 7.8 | May 1 | bpf: Fix regsafe() for pointers to packet Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-43027 | 7.8 | May 1 | netfilter: nf_conntrack_helper: pass helper to expect cleanup Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31768 | 7.8 | May 1 | iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31761 | 7.8 | May 1 | iio: gyro: mpu3050: Move iio_device_register() to correct location Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31700 | 7.8 | May 1 | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() Affected: V3.1.6; V3.1.7 |
| CVE-2026-31680 | 7.8 | Apr 25 | net: ipv6: flowlabel: defer exclusive option free until RCU teardown Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31665 | 7.8 | Apr 24 | netfilter: nft_ct: fix use-after-free in timeout object destroy Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31508 | 7.8 | Apr 22 | net: openvswitch: Avoid releasing netdev before teardown completes Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31507 | 7.8 | Apr 22 | net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31504 | 7.8 | Apr 22 | net: fix fanout UAF in packet_release() via NETDEV_UP race Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31494 | 7.8 | Apr 22 | net: macb: use the current queue number for stats Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31485 | 7.8 | Apr 22 | spi: spi-fsl-lpspi: fix teardown order issue (UAF) Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31469 | 7.8 | Apr 22 | virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31452 | 7.8 | Apr 22 | ext4: convert inline data to extents when truncate exceeds inline size Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31449 | 7.8 | Apr 22 | ext4: validate p_idx bounds in ext4_ext_correct_indexes Affected: V3.1.6; V3.1.7 |
| CVE-2026-31447 | 7.8 | Apr 22 | ext4: reject mount if bigalloc with s_first_data_block != 0 Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31446 | 7.8 | Apr 22 | ext4: fix use-after-free in update_super_work when racing with umount Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31403 | 7.8 | Apr 3 | NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31396 | 7.8 | Apr 3 | net: macb: fix use-after-free access to PTP clock Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-31389 | 7.8 | Apr 3 | spi: fix use-after-free on controller registration failure Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23458 | 7.8 | Apr 3 | netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23449 | 7.8 | Apr 3 | net/sched: teql: Fix double-free in teql_master_xmit Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23422 | 7.8 | Apr 3 | dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23392 | 7.8 | Mar 25 | netfilter: nf_tables: release flowtable after rcu grace period on error Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23391 | 7.8 | Mar 25 | netfilter: xt_CT: drop pending enqueued packets on template removal Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23378 | 7.8 | Mar 25 | net/sched: act_ife: Fix metalist update behavior Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23359 | 7.8 | Mar 25 | bpf: Fix stack-out-of-bounds write in devmap Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23351 | 7.8 | Mar 25 | netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23343 | 7.8 | Mar 25 | xdp: produce a warning when calculated tailroom is negative Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23340 | 7.8 | Mar 25 | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23319 | 7.8 | Mar 25 | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23274 | 7.8 | Mar 20 | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23273 | 7.8 | Mar 20 | macvlan: observe an RCU grace period in macvlan_common_newlink() error path Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23271 | 7.8 | Mar 20 | perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23270 | 7.8 | Mar 18 | net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23245 | 7.8 | Mar 18 | net/sched: act_gate: snapshot parameters with RCU on replace Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23243 | 7.8 | Mar 18 | RDMA/umad: Reject negative data_len in ib_umad_write Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23231 | 7.8 | Mar 4 | netfilter: nf_tables: fix use-after-free in nf_tables_addchain() Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23111 | 7.8 | Feb 13 | netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2026-23083 | 7.8 | Feb 4 | fou: Don't allow 0 for FOU_ATTR_IPPROTO. Affected: V3.1.6; V3.1.7 |
| CVE-2026-23010 | 7.8 | Jan 25 | ipv6: Fix use-after-free in inet6_addr_del(). Affected: V3.1.6; V3.1.7 |
| CVE-2025-71162 | 7.8 | Jan 25 | dmaengine: tegra-adma: Fix use-after-free Affected: V3.1.6; V3.1.7 |
The 500 most important CVEs for this product (exploited first, then by severity)