FrançaisShown in its original language — a full translation is planned for a future version.
Multiples vulnérabilités dans les produits Siemens
view advisory published 2026-10-13
A published security advisory; the vulnerabilities below are the ones it describes.
01
describes (719)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-89208DE | medium5.3 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions… | ||||
| CVE-2026-85115DE | medium5.5 | — | ||
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords… | ||||
| CVE-2026-85114DE | high7.5 | — | ||
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received… | ||||
| CVE-2026-72895DE | high7.7 | — | ||
A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G… | ||||
| CVE-2026-63357DE | medium6.1 | — | ||
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page.
This could allow an attacke… | ||||
| CVE-2026-63356DE | medium6.1 | — | ||
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page.
This could all… | ||||
| CVE-2026-63355DE | medium6.1 | — | ||
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page.
This could allow an atta… | ||||
| CVE-2026-63354DE | critical9.6 | — | ||
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page.
This could allow an attack… | ||||
| CVE-2026-63353DE | critical9.6 | — | ||
Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.
This could allow an attacker to social engine… | ||||
| CVE-2026-63352DE | medium6.1 | — | ||
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.
This could allow an attacker to soc… | ||||
| CVE-2026-63351DE | medium6.1 | — | ||
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page.
Thi… | ||||
| CVE-2026-63350DE | critical9.6 | — | ||
Affected devices do not properly restrict executable content contained in imported trace files.
This could allow an attacker to social engineer an authorized user who holds the… | ||||
| CVE-2026-59241DE | high8.8 | — | ||
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The… | ||||
| CVE-2026-44415DE | critical9.1 | — | ||
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal… | ||||
| CVE-2026-44414DE | medium6.8 | — | ||
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Devi… | ||||
| CVE-2026-102076DE | high7.5 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2026-102075DE | high7.5 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2026-102074DE | high7.5 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2026-102073DE | high8.2 | — | ||
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC… | ||||
| CVE-2026-64560US | — | Exploit | ||
In the Linux kernel, the following vulnerability has been resolved:
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
Wongi and Jungwoo decoded and reported a non-le… | ||||
showing 20 of 719
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan