Tormach

Tormach manufactures computer numerical control (CNC) machines and related industrial equipment, with vulnerabilities concentrated in its PathPilot controller and XSTech CNC router products. The recurring weakness classes—improper access control, insecure credential storage, hard-coded credentials, and improper handling of invalid structures—reflect the embedded and operational-technology nature of these devices, where network isolation and physical access controls have historically substituted for application-level defenses. Defenders managing these tools should inventory instances, restrict network exposure, and monitor firmware updates; live severity and exploitation counts are shown alongside this summary.