[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feSi4Mw-F5Cqw6epyHEbdlB45mqJbIAWrqYUROLm63kc":3},{"article":4,"iocs":48,"watch_terms":56,"solutions":57,"lesson":32},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"c4f26c31-3e68-4e92-b524-2e50ba18054f","EnOcean SmartServer Flaws Expose Buildings to Remote Hacking","enocean-smartserver-flaws-expose-buildings-to-remote-hacking-f9a2bb","Claroty researchers discovered two vulnerabilities that can be exploited for security bypass and remote code execution. The post EnOcean SmartServer Flaws Expose Buildings to Remote Hacking appeared first on SecurityWeek.","Claroty researchers discovered two critical vulnerabilities in EnOcean SmartServer, a multi-protocol IoT gateway used in building automation, factories, and data centers. The flaws—CVE-2026-22885 (security bypass) and CVE-2026-20761 (remote code execution)—allow remote attackers to bypass memory protections and execute arbitrary commands with root privileges. EnOcean released patch version 4.60.023 to address the issues, which also affect legacy i.LON devices.","EnOcean SmartServer vulnerabilities enable remote code execution on building management systems.","https:\u002F\u002Fwww.securityweek.com\u002Fenocean-smartserver-flaws-expose-buildings-to-remote-hacking\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F03\u002Fbuilding-automation-vulnerabilities.jpeg","2026-04-30T11:57:31+00:00","2026-04-30T12:00:22.708567+00:00",9,[17,20,23,25,27],{"name":18,"type":19},"EnOcean","vendor",{"name":21,"type":22},"SmartServer","product",{"name":24,"type":22},"i.LON",{"name":26,"type":19},"Claroty",{"name":28,"type":29},"Building Management Systems","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[49,53],{"type":50,"value":51,"context":52},"cve","CVE-2026-22885","Security bypass vulnerability in EnOcean SmartServer",{"type":50,"value":54,"context":55},"CVE-2026-20761","Remote code execution vulnerability in EnOcean SmartServer",[18,26,21],{"controls":58,"vendors":138},[59,88,113],{"slug":60,"name":61,"problem":62,"products":63},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":89,"name":90,"problem":91,"products":92},"patch-management","Automated patch management","Known holes get closed in days, not months.",[93,97,105],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":89,"product_name":94,"url":95,"description":96},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":114,"name":115,"problem":116,"products":117},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[118,123,131],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":119,"product_name":120,"url":121,"description":122},"tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":132,"vendor_name":26,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",[139],{"slug":132,"name":26,"logo_path":133,"roles":140},[141],"reported_by"]