CVE-2026-102076

highpriority · track · 30EPSS 0.006 · 47 %ileDEFRUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.57% (47th) EPSS
CVSS 7.5 · high
Is it mine?
26 products
Check your exposure
Who says so?
3 sources
cisa_csaf_ot · siemens_psirt · certfr

EPSS · scored 2026-10-23

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedAPOGEE PXC Compact (BACnet)siemens_psirt

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (P2 Ethernet)siemens_psirt

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (BACnet)siemens_psirt

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (P2 Ethernet)siemens_psirt

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Compact (BACnet)siemens_psirt

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Modular (BACnet)siemens_psirt

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (BACnet)cisa_csaf_ot

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (BACnet)cisa_csaf_ot

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot

    Update to V2.8.21 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Compact (BACnet)cisa_csaf_ot

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • FixedTALON TC Modular (BACnet)cisa_csaf_ot

    Update to V3.5.7 or later version

    https://partnerportal.extranet.dc.siemens.com/
  • MitigationAPOGEE MBC (PPC) (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (P2 Ethernet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (P2 Ethernet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Compact (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Modular (BACnet)siemens_psirt

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Compact (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • MitigationTALON TC Modular (BACnet)cisa_csaf_ot

    &nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.

  • No fix plannedAPOGEE MBC (PPC) (BACnet)siemens_psirt

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (BACnet)siemens_psirt

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

8.7
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–8.7

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · productcert@siemens.com DEexploitability 3.9 · impact 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Siemens ProductCERT DE
v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.06.6mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-121USCWE-121USCWE-121US
05

affected products (26)

Products and version ranges known to be affected.

showing 20 of 26
06

advisories (3)

Vendor and ecosystem advisories describing this.

  • SSA-333035SSA-333035: Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products2026-10-13csaf · siemens_psirtDE

    The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.

  • ICSA-26-295-08Siemens APOGEE, TALON and Desigo PXC/PXM Products2026-10-13icsa · cisa_csaf_otUS

    The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.

  • CERTFR-2026-AVI-1298Multiples vulnérabilités dans les produits SiemensFrançais2026-10-13vendor · certfrFR
07

sources

Which sources assert this record, and when.

cisa_csaf_otsiemens_psirtcertfrNVDCVE.orgMITRE
published 2026-10-13modified 2026-10-15
08

references (1) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan