<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: edgeaggregator</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-39482: Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-39482.html</link><guid>https://patchthecve.com/cve/CVE-2023-39482.html</guid><pubDate>Wed, 17 Jun 2026 06:12:25 +0000</pubDate><description>MEDIUM 6.5: Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnera</description></item><item><title>CVE-2023-38125: Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerabili</title><link>https://patchthecve.com/cve/CVE-2023-38125.html</link><guid>https://patchthecve.com/cve/CVE-2023-38125.html</guid><pubDate>Wed, 17 Jun 2026 06:09:29 +0000</pubDate><description>HIGH 8.8: Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability.

The s</description></item><item><title>CVE-2023-27336: Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-27336.html</link><guid>https://patchthecve.com/cve/CVE-2023-27336.html</guid><pubDate>Wed, 17 Jun 2026 05:44:49 +0000</pubDate><description>HIGH 7.5: Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerab</description></item><item><title>CVE-2023-27335: Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-27335.html</link><guid>https://patchthecve.com/cve/CVE-2023-27335.html</guid><pubDate>Wed, 17 Jun 2026 05:44:49 +0000</pubDate><description>CRITICAL 9.6: Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this vulnerability in that the target must visit a</description></item><item><title>CVE-2023-27334: Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-27334.html</link><guid>https://patchthecve.com/cve/CVE-2023-27334.html</guid><pubDate>Wed, 17 Jun 2026 05:44:48 +0000</pubDate><description>HIGH 7.5: Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerabil</description></item><item><title>CVE-2024-0860: 
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which </title><link>https://patchthecve.com/cve/CVE-2024-0860.html</link><guid>https://patchthecve.com/cve/CVE-2024-0860.html</guid><pubDate>Wed, 17 Jun 2026 06:54:27 +0000</pubDate><description>HIGH 8.0: 
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests.

</description></item><item><title>CVE-2023-38126: Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2023-38126.html</link><guid>https://patchthecve.com/cve/CVE-2023-38126.html</guid><pubDate>Wed, 17 Jun 2026 06:09:29 +0000</pubDate><description>HIGH 7.2: Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability.

The specific flaw</description></item></channel></rss>