METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25. The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25 All other vulnerabilities are to be fixed in the upcoming releases.
describes (65)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-39822US | — | — | ||
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the pa… | ||||
| CVE-2026-58472US | high7.1 | — | ||
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker t… | ||||
| CVE-2026-58471US | high7.1 | — | ||
GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to tri… | ||||
| CVE-2026-58469US | — | — | ||
GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicio… | ||||
| CVE-2026-8927US | —OT elevated | — | ||
When reusing a libcurl handle for sequential transfers driven by
environment-variable proxy configuration, libcurl fails to clear the proxy
authentication state between requests. S… | ||||
| CVE-2026-8924US | — | — | ||
A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set
"super cookies" that bypass the Public Suffix List check. This enables an
attacker-controlled origin to… | ||||
| CVE-2026-8286US | — | — | ||
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the
connection might reuse an existing live connection even though the TLS
configuration mismatches so it… | ||||
| CVE-2026-41992US | high7.5 | — | ||
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats with… | ||||
| CVE-2026-11822US | — | — | ||
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrar… | ||||
| CVE-2026-9076US | — | — | ||
Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)
processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK
cipher can trigger a heap ou… | ||||
| CVE-2026-7383US | — | — | ||
Issue summary: A signed integer overflow when sizing the destination
buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap
buffer overflow.
Impact summary: A heap… | ||||
| CVE-2026-45591US | — | — | ||
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-45447US | — | Exploit | ||
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could
trigger a use-after-free during PKCS#7 signature verification.
Impact summary: A use-after-free may result… | ||||
| CVE-2026-45445US | — | — | ||
Issue summary: When an application drives an AES-OCB context through the
public EVP_Cipher() one-shot interface, the application-supplied
initialisation vector (IV) is silently dis… | ||||
| CVE-2026-34182US | — | — | ||
Issue Summary: Cryptographic Message Services (CMS) processing fails to perform
sufficient input validation on the cipher and tag length fields of
AuthEnvelopedData containers, lea… | ||||
| CVE-2026-34180US | — | — | ||
Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive
element whose content exceeds 2 gigabytes in length may cause a heap buffer
over-read on 64-bit Unix a… | ||||
| CVE-2026-42504US | — | — | ||
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. | ||||
| CVE-2026-42012US | — | — | ||
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Serv… | ||||
| CVE-2026-42496US | critical9.1 | — | ||
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.
_make_special_file() passes the tar header's linknam… | ||||
| CVE-2026-39821US | — | — | ||
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns th… | ||||
references
External citations — patches, advisories, analysis.
- VDE-2026-088: METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4 - HTMLself
- CERT@VDE Security Advisories for METTLER TOLEDOexternal
- VDE-2026-088: METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4 - CSAFself
- Product security website of METTLER TOLEDOexternal
remediations (69)
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- No fix availableLabX Standard
This vulnerability will be fixed in the upcoming releases
- FixedLabX Enterprise
Update to LabX Enterprise v21.4.25 to address the vulnerability.
- FixedLabX Enterprise
Update to LabX Enterprise v21.4.25 to address the vulnerability.
- FixedLabX Enterprise
Update to LabX Enterprise v21.4.25 to address the vulnerability.
- FixedLabX Enterprise
Update to LabX Enterprise v21.4.25 to address the vulnerability.
- FixedLabX Standard
Update to LabX Standard v21.4.25 to address the vulnerability.
- FixedLabX Standard
Update to LabX Standard v21.4.25 to address the vulnerability.
- FixedLabX Standard
Update to LabX Standard v21.4.25 to address the vulnerability.
- FixedLabX Standard
Update to LabX Standard v21.4.25 to address the vulnerability.
- FixedLabX Standard
Update to LabX Standard v21.4.25 to address the vulnerability.
- FixedLabX Standard
Update to LabX Standard v21.4.25 to address the vulnerability.
- FixedLabX Standard
Update to LabX Standard v21.4.25 to address the vulnerability.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan