CVE Tools
Track your stack

Bosch

91 CVEs tracked since 2016. Since Jul 2016, none of them reached CISA KEV.

Bosch CVEs per month

Jul 2016 to Feb 2026. Point at a month, or focus the strip and use the arrow keys.
Bosch CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2016-0720
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-1220
2019-01null or fewer
2019-0220
2019-03null or fewer
2019-04null or fewer
2019-05100
2019-06null or fewer
2019-07null or fewer
2019-0840
2019-0920
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-0240
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-0140
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-0670
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-1040
2021-11null or fewer
2021-1240
2022-0130
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-0630
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-1240
2024-01260
2024-02null or fewer
2024-03null or fewer
2024-04null or fewer
2024-05null or fewer
2024-06null or fewer
2024-07null or fewer
2024-08null or fewer
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-12null or fewer
2025-01null or fewer
2025-02null or fewer
2025-03null or fewer
2025-04null or fewer
2025-05null or fewer
2025-06null or fewer
2025-07null or fewer
2025-08null or fewer
2025-09null or fewer
2025-10null or fewer
2025-11null or fewer
2025-12null or fewer
2026-01null or fewer
2026-02100

Products

The products that kept showing up in Bosch's monthly top three, with their CVEs summed over those months.

  1. Nexo-os251 month
  2. Video Recording Manager72 months
  3. Infotainment System Ecu61 month
  4. Smart Home Controller61 month
  5. Smart Home Controller Firmware61 month
  6. Cpp Firmware51 month
  7. CPP6 Firmware51 month
  8. Cpp7.3 Firmware51 month
  9. Access Professional Edition42 months
  10. Bvms41 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Bosch.

  1. CVE-2026-56428The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is ...8.1
  2. CVE-2024-58330A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data.7.5
  3. CVE-2024-58023Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.8.4
  4. CVE-2024-33618Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface.7.5
  5. CVE-2025-60038A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized...7.8
  6. CVE-2025-60037A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized...7.8
  7. CVE-2025-60036A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to execute arbitrar...7.8
  8. CVE-2025-60035A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to execute arbitr...7.8
  9. CVE-2025-32063Enabling SSH server on Infotainment ECU6.8
  10. CVE-2025-32062Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8
  11. CVE-2025-32061Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8
  12. CVE-2025-32060Absence of Kernel Module Signature Verification on Linux System of Infotainment ECU6.7
  13. CVE-2025-32059Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8
  14. CVE-2025-32058Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU9.3
  15. CVE-2025-60034Уязвимость модульной системы охранной сигнализации Bosch MAP 5000, связанная с использованием криптографических алгоритмов, содержащих дефекты, позволяющая нарушителю реализовать атаку типа «человек посередине»7.4

The record

Peak rank
#34 in Jan 2024
Busiest month shown
Jan 2024, 26 CVEs
Months with a KEV entry
0 since Jul 2016
Monthly snapshots
16 since 2016
Bosch's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store