Siemens
Vulnerability activity for Siemens: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 34
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Last 90 days
- CVEs
- 35
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Last 365 days
- CVEs
- 39
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 6.7MediumOct 20, 2026Siemens Software Center Privilege escalationCVE-2026-110936Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.Added to KEV Oct 20, 2026Exploited
- 7.5HighNov 18, 2016Siemens SIMATIC CP Privilege escalationCVE-2016-8562An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service.Added to KEV Mar 3, 2022 · 1,930 days after publicationExploited3.6% likely
Recent
- 6.8MediumOct 26, 2026Siemens Mendix SAML (Mendix 10 compatible) Auth bypass / access controlCVE-2026-89209A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 9 compatible) (All versions < V3.6.29). Affected versions of the module do not properly protect against SAML assertion re
- 6.7MediumOct 20, 2026Siemens Software Center Privilege escalationCVE-2026-110936Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.Exploited
- 7.5HighOct 13, 2026Siemens APOGEE MBC (PPC) (BACnet) Memory corruptionCVE-2026-102076A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Etherne
- 7.5HighOct 13, 2026Siemens APOGEE MBC (PPC) (BACnet) Memory corruptionCVE-2026-102075A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Etherne
- 7.5HighOct 13, 2026Siemens APOGEE MBC (PPC) (BACnet) Memory corruptionCVE-2026-102074A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Etherne
- 8.2HighOct 13, 2026Siemens APOGEE MBC (PPC) (BACnet) Memory corruptionCVE-2026-102073A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Etherne
- 5.3MediumOct 13, 2026Siemens Capital Embedded AR Classic 431-422 Memory corruptionCVE-2026-89208A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (All versions >= V2.3), Desigo PXC100-E.D (All versi
- 6.3MediumOct 13, 2026Siemens RUGGEDCOM CROSSBOWCVE-2026-89206A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or dele
- 6.3MediumOct 13, 2026Siemens RUGGEDCOM CROSSBOWCVE-2026-89205A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operatio
- 5.4MediumOct 13, 2026Siemens RUGGEDCOM CROSSBOW Auth bypass / access controlCVE-2026-89204A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized infor
- 4.3MediumOct 13, 2026Siemens RUGGEDCOM CROSSBOW Information disclosureCVE-2026-89203A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker
- 6.5MediumOct 13, 2026Siemens RUGGEDCOM CROSSBOW Auth bypass / access controlCVE-2026-89202A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including
- 7.5HighOct 13, 2026Siemens RUGGEDCOM CROSSBOW SQL injectionCVE-2026-89201A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arb
- 6.7MediumOct 13, 2026Siemens RUGGEDCOM CROSSBOW SQL injectionCVE-2026-89200A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL command
- 8.8HighOct 13, 2026Siemens RUGGEDCOM CROSSBOW Auth bypass / access controlCVE-2026-89199A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal sys
- 8.8HighOct 13, 2026Siemens RUGGEDCOM CROSSBOW SQL injectionCVE-2026-89198A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the u
- 8.8HighOct 13, 2026Siemens RUGGEDCOM CROSSBOW SQL injectionCVE-2026-89197A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific
- 8.8HighOct 13, 2026Siemens RUGGEDCOM CROSSBOW SQL injectionCVE-2026-89196A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQ
- 5.5MediumOct 13, 2026Siemens .NET Client Library for SIMATIC S7 Webserver API Information disclosureCVE-2026-85115A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to o
- 7.5HighOct 13, 2026Siemens .NET Client Library for SIMATIC S7 Webserver API Path traversal / file handlingCVE-2026-85114A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to w
- 8.3HighOct 13, 2026Siemens Industrial Edge App Publisher XSSCVE-2026-78557A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows fo
- 7.4HighOct 13, 2026Siemens Industrial Edge App Publisher Crypto / certificateCVE-2026-78556A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoo
- 7.7HighOct 13, 2026Siemens SIMATIC IPC BX-21ACVE-2026-72895A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is present in the UEFI Secure Boot key database. This coul
- 6.1MediumOct 13, 2026Siemens SIMATIC Drive Controller CPU 1504D TF XSSCVE-2026-63357Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially craft
- 6.1MediumOct 13, 2026Siemens SIMATIC Drive Controller CPU 1504D TF XSSCVE-2026-63356Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a sp
- 6.1MediumOct 13, 2026Siemens SIMATIC Drive Controller CPU 1504D TF XSSCVE-2026-63355Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially cr
- 9.6CriticalOct 13, 2026Siemens SIMATIC Drive Controller CPU 1504D TF XSSCVE-2026-63354Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially craf
- 9.6CriticalOct 13, 2026Siemens SIMATIC Drive Controller CPU 1504D TF XSSCVE-2026-63353Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Suc
- 6.1MediumOct 13, 2026Siemens SIMATIC Drive Controller CPU 1504D TF XSSCVE-2026-63352Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace
- 6.1MediumOct 13, 2026Siemens SIMATIC Drive Controller CPU 1504D TF XSSCVE-2026-63351Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into imp
- 9.6CriticalOct 13, 2026Siemens SIMATIC Drive Controller CPU 1504D TF Code / command injectionCVE-2026-63350Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow att
- 8.8HighOct 13, 2026Siemens SIMATIC WinCC V7.5 Privilege escalationCVE-2026-59241A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an a
- 9.1CriticalOct 13, 2026Siemens Industrial Edge Device Kit - arm64 V1.10 Path traversal / file handlingCVE-2026-44415Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the
- 6.8MediumOct 13, 2026Siemens Industrial Edge Cloud Device (IECD) Path traversal / file handlingCVE-2026-44414A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Industrial Edge Device Kit - arm64 V1.14, Industrial Edg
- 8.7HighSep 3, 2026Siemens Mendix SAML (Mendix 10 compatible) Crypto / certificateCVE-2026-80465A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 9.24 compatible) (All versions < V3.6.29). Affected versions of the module do not properly validate the SAML response signature. This could allow unauthenticated remote attackers to hijack an account (session) in specific SSO configurations.
- 7.4HighJul 14, 2026Siemens SIMATIC S7-PLCSIM Advanced Denial of serviceCVE-2026-54429A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected devices do not properly handle high-volume multicast network traffic, which can exhaust available memory resources in the affected application. This could allow an unauthenticated attacker on the local network segment to cause a denial-of-service condition of the affected application. The affected application becomes inaccessible and requires a manual restart; no project data is lost. Successful exploitati
- 7.1HighJun 9, 2026Siemens simatic wincc unified pc runtimeCVE-2026-24349A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC WinCC Unified PC Runtime V20 (All versions), SIMATIC WinCC Unified PC Runtime V21 (All versions < V21 Update 2). Insufficient protection of key material in WinCC Certificate Manager that could allow an attacker to extract sensitive informati
- 7.2HighDec 9, 2025Siemens ruggedcom rox ii firmware Code / command injectionCVE-2024-56840A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All versions < V2.17.0), RUGGEDCOM ROX RX1536 (All versions <
- 7.2HighDec 9, 2025Siemens ruggedcom rox ii firmware Code / command injectionCVE-2024-56838A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All versions < V2.17.0), RUGGEDCOM ROX RX1536 (All versions <
- 7.8HighOct 14, 2025Siemens solid edge se2024 Memory corruptionCVE-2025-40812A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.
- 7.8HighOct 14, 2025Siemens solid edge se2024 Memory corruptionCVE-2025-40811A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.
- 7.8HighOct 14, 2025Siemens solid edge se2024 Memory corruptionCVE-2025-40810A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.
- 7.8HighOct 14, 2025Siemens solid edge se2024 Memory corruptionCVE-2025-40809A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.
- 4.4MediumOct 14, 2025Siemens sipass integratedCVE-2025-40774A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this vulnerability allows an attacker to obtain and use valid user passwords. This can lead to unauthorized access to user accounts, data breaches, and potential system compromise.
- 3.5LowOct 14, 2025Siemens sipass integrated Auth bypass / access controlCVE-2025-40773A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request. Successful exploitation allows an attacker to potentially manipulate data belonging to other users.
- 7.4HighOct 14, 2025Siemens sipass integrated XSSCVE-2025-40772A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnerable to stored Cross-Site Scripting (XSS), allowing an attacker to inject malicious code that can be executed by other users when they visit the affected page. Successful exploitation allows an attacker to impersonate other users within the application and steal their session data. This could enable unauthorized access to accounts and potentially lead to privilege escalation.
- 9.8CriticalOct 14, 2025Siemens SIMATIC CP 1542SP-1 Auth bypass / access controlCVE-2025-40771A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.4.24). A
- 9.8CriticalOct 14, 2025Siemens telecontrol server basic Auth bypass / access controlCVE-2025-40765A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.
- 7.5HighSep 9, 2025Siemens simatic pcs neo Memory corruptionCVE-2025-40798A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
- 7.5HighSep 9, 2025Siemens simatic pcs neo Memory corruptionCVE-2025-40797A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a out-of-bounds read vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.
Top products
- RUGGEDCOM CROSSBOW11 CVEs in the last year
- SIMATIC Drive Controller CPU 1504D TF8 CVEs in the last year, 3 critical
- APOGEE MBC (PPC) (BACnet)4 CVEs in the last year
- ruggedcom rox ii firmware2 CVEs in the last year
- Mendix SAML (Mendix 10 compatible)2 CVEs in the last year
- Industrial Edge App Publisher2 CVEs in the last year
- .NET Client Library for SIMATIC S7 Webserver API2 CVEs in the last year
- Software Center1 CVE in the last year, 1 exploited
- SIMATIC WinCC V7.51 CVE in the last year
- simatic wincc unified pc runtime1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CISA · Oct 29, 2026Siemens Mendix SAML ModuleCVE-2026-89209
- CISA · Oct 22, 2026Siemens Software CenterCVE-2026-110936
- CISA · Oct 22, 2026Siemens SIMATIC S7 PLCs Web ServerCVE-2026-63350CVE-2026-63351CVE-2026-63352CVE-2026-63353CVE-2026-63354CVE-2026-63355
- CISA · Oct 22, 2026Siemens RUGGEDCOM CROSSBOWCVE-2026-89196CVE-2026-89197CVE-2026-89198CVE-2026-89199CVE-2026-89200CVE-2026-89201
- CISA · Oct 22, 2026Siemens Capital Embedded AR ClassicCVE-2026-89208
- CISA · Oct 22, 2026Siemens APOGEE, TALON and Desigo PXC/PXM ProductsCVE-2026-102073CVE-2026-102074CVE-2026-102075CVE-2026-102076CVE-2026-89208
- CISA · Oct 22, 2026Siemens SIMATIC S7 Webserver APICVE-2026-85114CVE-2026-85115
- CISA · Oct 22, 2026Siemens Industrial Edge Device KitCVE-2026-44414CVE-2026-44415
- CISA · Oct 22, 2026Siemens WinCCCVE-2026-59241
- CISA · Oct 22, 2026Siemens Industrial Edge DevicesCVE-2026-44414CVE-2026-44415
- CISA · Oct 22, 2026Siemens SIMATIC IPCsCVE-2026-72895
- CISA · Oct 22, 2026Siemens Industrial Edge App PublisherCVE-2026-78556CVE-2026-78557
- CCCS (Canada) · Oct 20, 2026Siemens security advisory (AV26-1063) – Update 1CVE-2026-110936
- CISA · Oct 20, 2026CISA Adds Six Known Exploited Vulnerabilities to CatalogCVE-2026-110936
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.