<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>OMRON Corporation — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/omron" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by OMRON Corporation (omron).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/omron.png</url>
      <title>OMRON Corporation — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:06 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-5397 · 7.8 HIGH — Vulnerability Related to an Uncontrolled Search Path Element in a UPS Management Application</title>
      <link>https://vulnogram.org/CVE-2026-5397</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-5397</guid>
      <description>It has been identified that a vulnerability (CWE-427) exists in the UPS (Uninterruptible Power Supply) management application, whereby improper permissions on the installation directory allow a malicious actor to place a DLL that is then executed wit…</description>
      <category>High</category>
      <pubDate>Wed, 15 Apr 2026 04:11:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-9818 · 6.7 MEDIUM — Vulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management application</title>
      <link>https://vulnogram.org/CVE-2025-9818</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-9818</guid>
      <description>A vulnerability (CWE-428) has been identified in the Uninterruptible Power Supply (UPS) management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If t…</description>
      <category>Medium</category>
      <pubDate>Wed, 17 Sep 2025 03:02:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1384 · 7 HIGH 🌩️ — Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers</title>
      <link>https://vulnogram.org/CVE-2025-1384</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1384</guid>
      <description>Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and t…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Sun, 13 Jul 2025 23:42:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-0591 · 7.8 HIGH — Out-of-bounds Read vulnerability in CX-Programmer</title>
      <link>https://vulnogram.org/CVE-2025-0591</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-0591</guid>
      <description>Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.</description>
      <category>High</category>
      <pubDate>Sun, 16 Feb 2025 23:58:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-12083 · 6.6 MEDIUM — Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers</title>
      <link>https://vulnogram.org/CVE-2024-12083</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-12083</guid>
      <description>Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.</description>
      <category>Medium</category>
      <pubDate>Tue, 14 Jan 2025 00:46:33 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-12298 · 5.5 MEDIUM — Vulnerability Report on Improper Restriction of XML External Entity Reference in NB-Designer</title>
      <link>https://vulnogram.org/CVE-2024-12298</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-12298</guid>
      <description>We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerability to disclose confidential data on a computer.</description>
      <category>Medium</category>
      <pubDate>Tue, 14 Jan 2025 00:45:38 GMT</pubDate>
    </item>
  </channel>
</rss>
