Log in Start free

ST Engineering iDirect

Products

ProductCVEsExploitedLatest
3315-Series terminals4–Sep 11, 2026
9-Series Terminals4–Sep 11, 2026
Evolution iQ‑Series terminals4–Sep 11, 2026
Evo iDX2–Sep 21, 2026
iDX2–Sep 21, 2026

Exploited and recent CVEs

  • CVE-2026-94216 Medium 4.3 ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting 0.4%
  • CVE-2026-94216 Medium 4.3 ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting 0.4%
  • CVE-2026-94214 Medium 4.3 ST Engineering iDirect iDX/Evo iDX Location Header redirect 0.4%
  • CVE-2026-94214 Medium 4.3 ST Engineering iDirect iDX/Evo iDX Location Header redirect 0.4%
  • CVE-2026-38056 High 8.8 ST Engineering iDirect iQ-Series Terminals Missing Authorization 0.2%
  • CVE-2026-38056 High 8.8 ST Engineering iDirect iQ-Series Terminals Missing Authorization 0.2%
  • CVE-2026-38056 High 8.8 ST Engineering iDirect iQ-Series Terminals Missing Authorization 0.2%
  • CVE-2026-38058 High 8.1 ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere 0.5%
  • CVE-2026-38058 High 8.1 ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere 0.5%
  • CVE-2026-38058 High 8.1 ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere 0.5%
  • CVE-2026-38059 High 7.5 ST Engineering iDirect iQ-Series Terminals Missing authentication for critical function 0.6%
  • CVE-2026-38059 High 7.5 ST Engineering iDirect iQ-Series Terminals Missing authentication for critical function 0.6%
  • CVE-2026-38059 High 7.5 ST Engineering iDirect iQ-Series Terminals Missing authentication for critical function 0.6%
  • CVE-2026-38057 High 8.1 ST Engineering iDirect iQ-Series Terminals Cross-Site request forgery 0.3%
  • CVE-2026-38057 High 8.1 ST Engineering iDirect iQ-Series Terminals Cross-Site request forgery 0.3%
  • CVE-2026-38057 High 8.1 ST Engineering iDirect iQ-Series Terminals Cross-Site request forgery 0.3%