Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: GE Vernova Clear all filters
TI-2026-01446 CVE-2026-1763 · GHSA-w49w-5662-qw44

Enervista UR Setup DLL Hijacking

Priority LOW 21

Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.

CVSS 3.1MEDIUM 4.6 Physical High privileges No interaction EPSS 0.0022 Published 2026-02-10 No fix listed CWE-35
TI-2026-01445 CVE-2026-1762 · GHSA-hh4j-fpgp-7x26

Enervista UR Setup Directory Traversal Vulnerability

Priority LOW 14

A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions.

CVSS 3.1LOW 2.9 Physical High privileges No interaction EPSS 0.00254 Published 2026-02-10 No fix listed CWE-23
TI-2025-02821 CVE-2025-3222 · GHSA-mrvf-43v7-86fr

Smallworld SWMFS Improper Authentication

Priority MEDIUM 48

Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00411 Published 2025-11-07 No fix listed CWE-287
TI-2025-07045 CVE-2025-7719 · GHSA-x34q-4vc5-pwfp

Smallworld SWMFS Arbitrary File Ops

Priority LOW 30

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00372 Published 2025-11-07 No fix listed CWE-22
TI-2025-08283 CVE-2025-9038 · GHSA-qv9v-x5p8-5h5p

S1 Agile Privilege Escalation

Priority LOW 34

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version.

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00119 Published 2025-09-22 No fix listed CWE-269
TI-2025-02822 CVE-2025-3223 · GHSA-7hp3-hv9v-w85q

WorkstationST EGD Configuration Server Path Traversal Vulnerability

Priority LOW 26

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server modules) allows Path Traversal.This issue affects WorkstationS…

CVSS 3.1MEDIUM 5.9 Adjacent network Low privileges No interaction EPSS 0.00235 Published 2025-05-19 No fix listed CWE-22
TI-2025-20104 CVE-2025-27257 · GHSA-5v9q-jpv7-7w2m

Insufficient verification of data authenticity in GE Vernova N60 multilin

Priority LOW 26

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated user to install a modified firmware.

CVSS 3.1MEDIUM 6.1 Adjacent network High privileges No interaction EPSS 0.00181 Published 2025-03-10 No fix listed CWE-345
TI-2025-20103 CVE-2025-27256 · GHSA-gjhg-f944-56m2

Missing authentication in GE Vernova EnerVista UR Setup

Priority LOW 36

Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentication Bypass due to a missing SSH server authentication.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00283 Published 2025-03-10 No fix listed CWE-306
TI-2025-20102 CVE-2025-27255 · GHSA-fh83-6qjg-wh4v

Hard-coded credentials in GE Vernova EnerVista UR Setup

Priority LOW 36

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.00152 Published 2025-03-10 No fix listed CWE-798
TI-2025-20100 CVE-2025-27253 · GHSA-j5vp-q6vg-25mf

A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED…

Priority LOW 27

A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED family devices from version 7.0 up to 8.60 allows an attacker to provide input that establishes a TCP connection through a port forwardi…

CVSS 3.1MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00234 Published 2025-03-10 No fix listed CWE-15