Known Vulnerabilities for IC7-Hybrid by Danfoss
Listed below are 10 of the newest known vulnerabilities associated with "IC7-Hybrid" by "Danfoss".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114617 json | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-105119 json | OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is exact... | Not Provided | 2026-10-03 | 2026-10-06 |
| CVE-2026-103513 json | Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A crafte... | Not Provided | 2026-10-10 | 2026-10-16 |
| CVE-2026-102824 json | Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-85608 json | Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /api/h... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-84716 json | A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator... | Not Provided | 2026-09-23 | 2026-09-24 |
| CVE-2026-57817 json | The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in the Hyb... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-53472 json | A flaw was found in migration-planner. Insufficient validation of the `AgentStatusUpdate.CredentialUrl` field allows an authe... | Not Provided | 2026-08-14 | 2026-08-14 |
| CVE-2026-15203 json | Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allo... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-1907 json | A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in... | Not Provided | 2026-10-12 | 2026-10-15 |