CVE-2026-41989: libgcrypt from 1.8.8 (inclusive), before 1.10.4 (exclusive), from 1.11.0 (inclusive), before 1.11.3 (exclusive), from…

Affected technology

libgcrypt · from 1.8.8 (inclusive), before 1.10.4 (exclusive)
gnupg

libgcrypt · from 1.11.0 (inclusive), before 1.11.3 (exclusive)
gnupg

libgcrypt · from 1.12.0 (inclusive), before 1.12.2 (exclusive)
gnupg

Libgcrypt · 1.8.8 to before 1.10.4, 1.11.0 to before 1.11.3, 1.12.0 to before 1.12.2
gnupg

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Description’s affected range: before 1.12.2 sometimes

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service. Vendor/CNA’s CVSS 3.1 assessment (base score 6.7/10) rates confidentiality impact as none; integrity and availability impact as high.