# cve.now: Siemens

The newest entries naming Siemens as an affected vendor (up to 200), of 1,854 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-112137](https://cve.now/CVE-2026-112137.md): A vulnerability has been identified in Mendix Studio Pro 11 (All versions \>= V11.15.0 \< V11.16.0), Mendix Studio Pro 11.12 (All versions… (CVSS 5.4)
- [CVE-2026-112136](https://cve.now/CVE-2026-112136.md): A vulnerability has been identified in Mendix Studio Pro 11 (All versions \>= V11.15.0 \< V11.16.0), Mendix Studio Pro 11.12 (All versions… (CVSS 8.8)
- [CVE-2026-109830](https://cve.now/CVE-2026-109830.md): A vulnerability has been identified in meta-iot2050 (All versions \>= V01.03.01). (CVSS 7.3)
- [CVE-2026-109097](https://cve.now/CVE-2026-109097.md): A vulnerability has been identified in ROS# (All versions \< V2.3.1). (CVSS 8.2)
- [CVE-2026-59082](https://cve.now/CVE-2026-59082.md): A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All… (CVSS 7.8)
- [CVE-2026-58114](https://cve.now/CVE-2026-58114.md): A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC… (CVSS 7.5)
- [CVE-2026-89209](https://cve.now/CVE-2026-89209.md): A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions \< V4.2.4), Mendix SAML (Mendix 11 compatible) (All… (CVSS 6.8)
- [CVE-2026-110936](https://cve.now/CVE-2026-110936.md): A vulnerability has been identified in Siemens Software Center (All versions \< V4.0.9.8). (CVSS 6.7, KEV)
- [CVE-2026-102076](https://cve.now/CVE-2026-102076.md): A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC ( (CVSS 7.5)
- [CVE-2026-102075](https://cve.now/CVE-2026-102075.md): A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC ( (CVSS 7.5)
- [CVE-2026-102074](https://cve.now/CVE-2026-102074.md): A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC ( (CVSS 7.5)
- [CVE-2026-102073](https://cve.now/CVE-2026-102073.md): A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC ( (CVSS 8.2)
- [CVE-2026-89208](https://cve.now/CVE-2026-89208.md): A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions (CVSS 5.3)
- [CVE-2026-89206](https://cve.now/CVE-2026-89206.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 6.3)
- [CVE-2026-89205](https://cve.now/CVE-2026-89205.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 6.3)
- [CVE-2026-89204](https://cve.now/CVE-2026-89204.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 5.4)
- [CVE-2026-89203](https://cve.now/CVE-2026-89203.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 4.3)
- [CVE-2026-89202](https://cve.now/CVE-2026-89202.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 6.5)
- [CVE-2026-89201](https://cve.now/CVE-2026-89201.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 7.5)
- [CVE-2026-89200](https://cve.now/CVE-2026-89200.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 6.7)
- [CVE-2026-89199](https://cve.now/CVE-2026-89199.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 8.8)
- [CVE-2026-89198](https://cve.now/CVE-2026-89198.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 8.8)
- [CVE-2026-89197](https://cve.now/CVE-2026-89197.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 8.8)
- [CVE-2026-89196](https://cve.now/CVE-2026-89196.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V6.0). (CVSS 8.8)
- [CVE-2026-85115](https://cve.now/CVE-2026-85115.md): A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions \< V3.3.62). (CVSS 5.5)
- [CVE-2026-85114](https://cve.now/CVE-2026-85114.md): A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions \< V3.3.61). (CVSS 7.5)
- [CVE-2026-78557](https://cve.now/CVE-2026-78557.md): A vulnerability has been identified in Industrial Edge App Publisher (All versions \< V1.27.9). (CVSS 8.3)
- [CVE-2026-78556](https://cve.now/CVE-2026-78556.md): A vulnerability has been identified in Industrial Edge App Publisher (All versions \< V1.27.9). (CVSS 7.4)
- [CVE-2026-72895](https://cve.now/CVE-2026-72895.md): A vulnerability has been identified in SIMATIC IPC BX-21A (All versions \< V31.01.13), SIMATIC IPC RW-543A (All versions \< V1.1.4), SIMATIC I (CVSS 7.7)
- [CVE-2026-63357](https://cve.now/CVE-2026-63357.md): Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Tr (CVSS 6.1)
- [CVE-2026-63356](https://cve.now/CVE-2026-63356.md): Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messa (CVSS 6.1)
- [CVE-2026-63355](https://cve.now/CVE-2026-63355.md): Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the (CVSS 6.1)
- [CVE-2026-63354](https://cve.now/CVE-2026-63354.md): Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the T (CVSS 9.6)
- [CVE-2026-63353](https://cve.now/CVE-2026-63353.md): Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. (CVSS 9.6)
- [CVE-2026-63352](https://cve.now/CVE-2026-63352.md): Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page (CVSS 6.1)
- [CVE-2026-63351](https://cve.now/CVE-2026-63351.md): Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before (CVSS 6.1)
- [CVE-2026-63350](https://cve.now/CVE-2026-63350.md): Affected devices do not properly restrict executable content contained in imported trace files. (CVSS 9.6)
- [CVE-2026-59241](https://cve.now/CVE-2026-59241.md): A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions \< V8.0 Update 11), SIMATIC WinCC (CVSS 8.8)
- [CVE-2026-44415](https://cve.now/CVE-2026-44415.md): Affected systems do not properly restrict access to internal APIs and paths for authenticated users. (CVSS 9.1)
- [CVE-2026-44414](https://cve.now/CVE-2026-44414.md): A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device (CVSS 6.8)
- [CVE-2026-89207](https://cve.now/CVE-2026-89207.md): A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions \< V3.94), WTV776-HB6035 Web Interface (All versions \< V4.17 (CVSS 6.5)
- [CVE-2026-67367](https://cve.now/CVE-2026-67367.md): A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions \< V3.1.13), SIMOVE Fleetmanager V3.2 (All versions \< V3.2.4), (CVSS 8.6)
- [CVE-2026-62654](https://cve.now/CVE-2026-62654.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 6.8)
- [CVE-2026-62653](https://cve.now/CVE-2026-62653.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 6.8)
- [CVE-2026-62652](https://cve.now/CVE-2026-62652.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 5.3)
- [CVE-2026-62650](https://cve.now/CVE-2026-62650.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 8.8)
- [CVE-2026-62649](https://cve.now/CVE-2026-62649.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 7.5)
- [CVE-2026-62648](https://cve.now/CVE-2026-62648.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 7.5)
- [CVE-2026-62647](https://cve.now/CVE-2026-62647.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 7.4)
- [CVE-2026-62646](https://cve.now/CVE-2026-62646.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 7.4)
- [CVE-2026-62645](https://cve.now/CVE-2026-62645.md): A vulnerability has been identified in Reyrolle 7SR5 (All versions \< V2.70). (CVSS 9.8)
- [CVE-2026-58113](https://cve.now/CVE-2026-58113.md): A vulnerability has been identified in Teamcenter V2412 (All versions \< V2412.0013), Teamcenter V2506 (All versions \< V2506.0010), Teamcente (CVSS 6.1)
- [CVE-2026-50093](https://cve.now/CVE-2026-50093.md): A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions \< V3.0.12.2173), Siveillance Control Pro V4.0 (All version (CVSS 9.0)
- [CVE-2026-34223](https://cve.now/CVE-2026-34223.md): A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC (CVSS 8.2)
- [CVE-2026-80465](https://cve.now/CVE-2026-80465.md): A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions \< V4.2.4), Mendix SAML (Mendix 11 compatible) (All v (CVSS 8.7)
- [CVE-2026-66155](https://cve.now/CVE-2026-66155.md): A vulnerability has been identified in Element maps-ng V47 (All versions \< V47.12.3), Element maps-ng V48 (All versions \< V48.11.3), Element (CVSS 7.6)
- [CVE-2026-54548](https://cve.now/CVE-2026-54548.md): kas: Persistent SSH Host Key Checking Disablement (CVSS 3.3)
- [CVE-2026-47192](https://cve.now/CVE-2026-47192.md): kas's late signature validation may allow unnoticed repository manipulations (CVSS 2.1)
- [CVE-2026-47191](https://cve.now/CVE-2026-47191.md): kas checks out SHA-like git branches as valid commits (CVSS 2.1)
- [CVE-2026-69109](https://cve.now/CVE-2026-69109.md): A vulnerability has been identified in Siemens License Server (SLS) (All versions \< V5.3). (CVSS 7.5)
- [CVE-2026-69108](https://cve.now/CVE-2026-69108.md): A vulnerability has been identified in Siemens License Server (SLS) (All versions \< V5.1). (CVSS 6.0)
- [CVE-2026-64629](https://cve.now/CVE-2026-64629.md): A vulnerability has been identified in Parasolid V38.0 (All versions \< V38.0.235), Parasolid V38.1 (All versions \< V38.1.230), Simcenter… (CVSS 7.8)
- [CVE-2026-59701](https://cve.now/CVE-2026-59701.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2606.0001). (CVSS 7.8)
- [CVE-2026-59700](https://cve.now/CVE-2026-59700.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2606.0001). (CVSS 7.8)
- [CVE-2026-59693](https://cve.now/CVE-2026-59693.md): A vulnerability has been identified in Desigo DXR2 (All versions \< V01.21.233.16-7862), Desigo PXC3 (All versions \< V01.21.233.16-7862), Des (CVSS 4.3)
- [CVE-2026-59086](https://cve.now/CVE-2026-59086.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2606), Simcenter Nastran (All versions \< V2606). (CVSS 7.8)
- [CVE-2026-58115](https://cve.now/CVE-2026-58115.md): A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions \< V4.3.4-1 running Industrial OS with… (CVSS 10.0)
- [CVE-2026-57263](https://cve.now/CVE-2026-57263.md): A vulnerability has been identified in LOGO! Soft Comfort (All versions \< V9). (CVSS 6.8)
- [CVE-2026-57262](https://cve.now/CVE-2026-57262.md): A vulnerability has been identified in LOGO! Soft Comfort (All versions \< V9). (CVSS 6.8)
- [CVE-2026-50064](https://cve.now/CVE-2026-50064.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 15), Solid Edge SE2026 (All versions \< V226.0 Update (CVSS 7.8)
- [CVE-2026-50063](https://cve.now/CVE-2026-50063.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 15), Solid Edge SE2026 (All versions \< V226.0 Update (CVSS 7.8)
- [CVE-2026-50062](https://cve.now/CVE-2026-50062.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 15), Solid Edge SE2026 (All versions \< V226.0 Update (CVSS 7.8)
- [CVE-2026-50061](https://cve.now/CVE-2026-50061.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 15), Solid Edge SE2026 (All versions \< V226.0 Update (CVSS 7.8)
- [CVE-2026-50060](https://cve.now/CVE-2026-50060.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 15), Solid Edge SE2026 (All versions \< V226.0 Update (CVSS 7.8)
- [CVE-2026-50059](https://cve.now/CVE-2026-50059.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 15), Solid Edge SE2026 (All versions \< V226.0 Update (CVSS 7.8)
- [CVE-2026-50058](https://cve.now/CVE-2026-50058.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 15), Solid Edge SE2026 (All versions \< V226.0 Update (CVSS 7.8)
- [CVE-2026-56451](https://cve.now/CVE-2026-56451.md): A vulnerability has been identified in Opcenter X (All versions \< V2604). (CVSS 10.0)
- [CVE-2026-54429](https://cve.now/CVE-2026-54429.md): A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). (CVSS 7.4)
- [CVE-2025-40945](https://cve.now/CVE-2025-40945.md): A vulnerability has been identified in COMOS V10.4.5 (All versions \< V10.4.5.0.2), COMOS V10.6 (All versions \< V10.6.1), Designcenter NX (Al (CVSS 6.7)
- [CVE-2026-54801](https://cve.now/CVE-2026-54801.md): A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \< V26.20), SICORE Base system (All versions \< V (CVSS 7.2)
- [CVE-2026-54800](https://cve.now/CVE-2026-54800.md): A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \< V26.20), SICORE Base system (All versions \< V (CVSS 4.8)
- [CVE-2026-54799](https://cve.now/CVE-2026-54799.md): A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \< V26.20), SICORE Base system (All versions \< V (CVSS 6.7)
- [CVE-2026-54798](https://cve.now/CVE-2026-54798.md): A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \< V26.20), SICORE Base system (All versions \< V (CVSS 6.5)
- [CVE-2026-48192](https://cve.now/CVE-2026-48192.md): A vulnerability has been identified in Mendix Studio Pro 10.11 (All versions), Mendix Studio Pro 10.12 (All versions), Mendix Studio Pro 10. (CVSS 5.4)
- [CVE-2026-46749](https://cve.now/CVE-2026-46749.md): A vulnerability has been identified in SINEC INS (All versions \< V1.0 SP2 Update 6). (CVSS 7.5)
- [CVE-2026-46748](https://cve.now/CVE-2026-46748.md): A vulnerability has been identified in SINEC INS (All versions \< V1.0 SP2 Update 6). (CVSS 8.8)
- [CVE-2026-46747](https://cve.now/CVE-2026-46747.md): A vulnerability has been identified in SINEC INS (All versions \< V1.0 SP2 Update 6). (CVSS 4.3)
- [CVE-2026-46746](https://cve.now/CVE-2026-46746.md): A vulnerability has been identified in SINEC INS (All versions \< V1.0 SP2 Update 6). (CVSS 8.8)
- [CVE-2026-24349](https://cve.now/CVE-2026-24349.md): A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versio (CVSS 7.1)
- [CVE-2025-40808](https://cve.now/CVE-2025-40808.md): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (C (CVSS 6.1)
- [CVE-2026-41918](https://cve.now/CVE-2026-41918.md): A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions \< V4.0). (CVSS 5.7)
- [CVE-2026-42177](https://cve.now/CVE-2026-42177.md): linux-entra-sso: PRT SSO cookie can leak to attacker-controlled hosts when broad host permissions are granted (CVSS 5.3)
- [CVE-2025-12659](https://cve.now/CVE-2025-12659.md): Heap-based buffer overflow in Siemens Simcenter Femap (CVSS 7.3)
- [CVE-2026-44412](https://cve.now/CVE-2026-44412.md): A vulnerability has been identified in Solid Edge SE2026 (All versions \< V226.0 Update 5). (CVSS 7.8)
- [CVE-2026-44411](https://cve.now/CVE-2026-44411.md): A vulnerability has been identified in Solid Edge SE2026 (All versions \< V226.0 Update 5). (CVSS 7.8)
- [CVE-2026-41551](https://cve.now/CVE-2026-41551.md): A vulnerability has been identified in ROS# (All versions \< V2.2.2). (CVSS 9.1)
- [CVE-2026-41125](https://cve.now/CVE-2026-41125.md): A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All (CVSS 6.0)
- [CVE-2026-33893](https://cve.now/CVE-2026-33893.md): A vulnerability has been identified in Teamcenter V2312 (All versions \< V2312.0014), Teamcenter V2406 (All versions \< V2406.0012), Teamcente (CVSS 7.5)
- [CVE-2026-33862](https://cve.now/CVE-2026-33862.md): A vulnerability has been identified in Teamcenter V2312 (All versions \< V2312.0014), Teamcenter V2406 (All versions \< V2406.0012), Teamcente (CVSS 7.3)
- [CVE-2026-27662](https://cve.now/CVE-2026-27662.md): Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in p (CVSS 7.7)
- [CVE-2026-25789](https://cve.now/CVE-2026-25789.md): Affected devices do not properly validate and sanitize filenames on the Firmware Update page. (CVSS 7.1)
- [CVE-2026-25787](https://cve.now/CVE-2026-25787.md): Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the (CVSS 9.1)
- [CVE-2026-25786](https://cve.now/CVE-2026-25786.md): Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface (CVSS 9.1)
- [CVE-2026-22925](https://cve.now/CVE-2026-22925.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V5.0). (CVSS 7.5)
- [CVE-2026-22924](https://cve.now/CVE-2026-22924.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V5.0). (CVSS 9.1)
- [CVE-2025-40949](https://cve.now/CVE-2025-40949.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1), RUGGE (CVSS 9.1)
- [CVE-2025-40948](https://cve.now/CVE-2025-40948.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1), RUGGE (CVSS 6.8)
- [CVE-2025-40947](https://cve.now/CVE-2025-40947.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.1), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.1), RUGGE (CVSS 7.5)
- [CVE-2025-40946](https://cve.now/CVE-2025-40946.md): A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions \< V6.1.4.9), blueplanet 1 (CVSS 8.3)
- [CVE-2025-40833](https://cve.now/CVE-2025-40833.md): The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. (CVSS 7.5)
- [CVE-2024-54017](https://cve.now/CVE-2024-54017.md): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions \< V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 (CVSS 5.3)
- [CVE-2026-33892](https://cve.now/CVE-2026-33892.md): A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions \>= V1.7.6 \< V1.15.17), Industrial Edge Management Pro (CVSS 7.1)
- [CVE-2026-27668](https://cve.now/CVE-2026-27668.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions \< V5.8). (CVSS 8.8)
- [CVE-2026-25654](https://cve.now/CVE-2026-25654.md): A vulnerability has been identified in SINEC NMS (All versions \< V4.0 SP3). (CVSS 8.8)
- [CVE-2026-24032](https://cve.now/CVE-2026-24032.md): A vulnerability has been identified in SINEC NMS (All versions \< V4.0 SP3 with UMC). (CVSS 7.3)
- [CVE-2025-40745](https://cve.now/CVE-2025-40745.md): A vulnerability has been identified in Siemens Software Center (All versions \< V3.5.8.2), Simcenter 3D (All versions \< V2506.6000), Simcente (CVSS 3.7)
- [CVE-2026-27664](https://cve.now/CVE-2026-27664.md): A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \< V26.10), SICORE Base system (All versions \< V (CVSS 7.5)
- [CVE-2026-27663](https://cve.now/CVE-2026-27663.md): A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \< V26.10), RTUM85 RTU Base (All versions \< V26. (CVSS 6.5)
- [CVE-2026-27661](https://cve.now/CVE-2026-27661.md): A vulnerability has been identified in SINEC Security Monitor (All versions \< V4.9.0). (CVSS 4.3)
- [CVE-2026-25605](https://cve.now/CVE-2026-25605.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 6.7)
- [CVE-2026-25573](https://cve.now/CVE-2026-25573.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 7.4)
- [CVE-2026-25572](https://cve.now/CVE-2026-25572.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 5.1)
- [CVE-2026-25571](https://cve.now/CVE-2026-25571.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 5.1)
- [CVE-2026-25570](https://cve.now/CVE-2026-25570.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 7.4)
- [CVE-2026-25569](https://cve.now/CVE-2026-25569.md): A vulnerability has been identified in SICAM SIAPP SDK (All versions \< V2.1.7). (CVSS 7.4)
- [CVE-2025-40943](https://cve.now/CVE-2025-40943.md): Affected devices do not properly sanitize contents of trace files. (CVSS 9.6)
- [CVE-2025-27769](https://cve.now/CVE-2025-27769.md): A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions \< F4.11.1), Heliox Mobile DC 40 kW EV Charging S (CVSS 2.6)
- [CVE-2026-25656](https://cve.now/CVE-2026-25656.md): A vulnerability has been identified in SINEC NMS (All versions \< V4.0 SP3), User Management Component (UMC) (All versions \< V2.15.2.1). (CVSS 7.8)
- [CVE-2026-25655](https://cve.now/CVE-2026-25655.md): A vulnerability has been identified in SINEC NMS (All versions \< V4.0 SP2). (CVSS 7.8)
- [CVE-2026-23720](https://cve.now/CVE-2026-23720.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2512), Simcenter Nastran (All versions \< V2512). (CVSS 7.8)
- [CVE-2026-23719](https://cve.now/CVE-2026-23719.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2512), Simcenter Nastran (All versions \< V2512). (CVSS 7.8)
- [CVE-2026-23718](https://cve.now/CVE-2026-23718.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2512), Simcenter Nastran (All versions \< V2512). (CVSS 7.8)
- [CVE-2026-23717](https://cve.now/CVE-2026-23717.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2512), Simcenter Nastran (All versions \< V2512). (CVSS 7.8)
- [CVE-2026-23716](https://cve.now/CVE-2026-23716.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2512), Simcenter Nastran (All versions \< V2512). (CVSS 7.8)
- [CVE-2026-23715](https://cve.now/CVE-2026-23715.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2512), Simcenter Nastran (All versions \< V2512). (CVSS 7.8)
- [CVE-2026-22923](https://cve.now/CVE-2026-22923.md): A vulnerability has been identified in NX (All versions \< V2512), NX (Managed Mode) (All versions \< V2512). (CVSS 7.8)
- [CVE-2025-40587](https://cve.now/CVE-2025-40587.md): A vulnerability has been identified in Polarion V2404 (All versions \< V2404.5), Polarion V2410 (All versions \< V2410.2). (CVSS 7.6)
- [CVE-2024-52334](https://cve.now/CVE-2024-52334.md): A vulnerability has been identified in syngo.plaza VB30E (All versions \< VB30E\_HF07). (CVSS 5.3)
- [CVE-2025-40944](https://cve.now/CVE-2025-40944.md): A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200MP IM 155-5 PN HF (6E (CVSS 7.5)
- [CVE-2025-40942](https://cve.now/CVE-2025-40942.md): A vulnerability has been identified in TeleControl Server Basic (All versions \< V3.1.2.4). (CVSS 8.8)
- [CVE-2025-40805](https://cve.now/CVE-2025-40805.md): Affected devices do not properly enforce user authentication on specific API endpoints. (CVSS 10.0)
- [CVE-2025-40829](https://cve.now/CVE-2025-40829.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2512). (CVSS 7.8)
- [CVE-2025-40941](https://cve.now/CVE-2025-40941.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V4.0.1). (CVSS 4.3)
- [CVE-2025-40940](https://cve.now/CVE-2025-40940.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V4.0.1). (CVSS 4.9)
- [CVE-2025-40939](https://cve.now/CVE-2025-40939.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V4.0.1). (CVSS 4.6)
- [CVE-2025-40938](https://cve.now/CVE-2025-40938.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V4.0.1). (CVSS 8.1)
- [CVE-2025-40937](https://cve.now/CVE-2025-40937.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V4.0.1). (CVSS 8.3)
- [CVE-2025-40935](https://cve.now/CVE-2025-40935.md): A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions \< V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions \< V5.10.1), RU (CVSS 4.3)
- [CVE-2025-40831](https://cve.now/CVE-2025-40831.md): A vulnerability has been identified in SINEC Security Monitor (All versions \< V4.10.0). (CVSS 6.5)
- [CVE-2025-40830](https://cve.now/CVE-2025-40830.md): A vulnerability has been identified in SINEC Security Monitor (All versions \< V4.10.0). (CVSS 6.7)
- [CVE-2025-40820](https://cve.now/CVE-2025-40820.md): Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. (CVSS 7.5)
- [CVE-2025-40819](https://cve.now/CVE-2025-40819.md): A vulnerability has been identified in SINEMA Remote Connect Server (All versions \< V3.2 SP4). (CVSS 4.3)
- [CVE-2025-40818](https://cve.now/CVE-2025-40818.md): A vulnerability has been identified in SINEMA Remote Connect Server (All versions \< V3.2 SP4). (CVSS 3.3)
- [CVE-2025-40807](https://cve.now/CVE-2025-40807.md): A vulnerability has been identified in Gridscale X Prepay (All versions \< V4.2.1). (CVSS 6.3)
- [CVE-2025-40806](https://cve.now/CVE-2025-40806.md): A vulnerability has been identified in Gridscale X Prepay (All versions \< V4.2.1). (CVSS 5.3)
- [CVE-2025-40801](https://cve.now/CVE-2025-40801.md): A vulnerability has been identified in COMOS V10.6 (All versions \< V10.6.1), COMOS V10.6 (All versions \< V10.6.1), JT Bi-Directional Transla (CVSS 8.1)
- [CVE-2025-40800](https://cve.now/CVE-2025-40800.md): A vulnerability has been identified in COMOS V10.6 (All versions \< V10.6.1), COMOS V10.6 (All versions \< V10.6.1), NX V2412 (All versions \< (CVSS 7.4)
- [CVE-2024-56840](https://cve.now/CVE-2024-56840.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.0), RUGGE (CVSS 7.2)
- [CVE-2024-56839](https://cve.now/CVE-2024-56839.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.0), RUGGE (CVSS 7.2)
- [CVE-2024-56838](https://cve.now/CVE-2024-56838.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.0), RUGGE (CVSS 7.2)
- [CVE-2024-56837](https://cve.now/CVE-2024-56837.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.0), RUGGE (CVSS 7.2)
- [CVE-2024-56836](https://cve.now/CVE-2024-56836.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.0), RUGGE (CVSS 7.5)
- [CVE-2024-56835](https://cve.now/CVE-2024-56835.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.17.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.17.0), RUGGE (CVSS 8.8)
- [CVE-2025-40936](https://cve.now/CVE-2025-40936.md): A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions \< V29.0.258), Simcenter Femap (All versions \< V2 (CVSS 7.8)
- [CVE-2025-40834](https://cve.now/CVE-2025-40834.md): A vulnerability has been identified in Mendix RichText (All versions \>= V4.0.0 \< V4.6.1). (CVSS 5.7)
- [CVE-2025-40827](https://cve.now/CVE-2025-40827.md): A vulnerability has been identified in Siemens Software Center (All versions \< V3.5), Solid Edge SE2025 (All versions \< V225.0 Update 10). (CVSS 7.8)
- [CVE-2025-40817](https://cve.now/CVE-2025-40817.md): A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions \< V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) ( (CVSS 6.5)
- [CVE-2025-40816](https://cve.now/CVE-2025-40816.md): A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions \< V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) ( (CVSS 7.6)
- [CVE-2025-40815](https://cve.now/CVE-2025-40815.md): A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions \< V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) ( (CVSS 7.2)
- [CVE-2025-40763](https://cve.now/CVE-2025-40763.md): A vulnerability has been identified in Altair Grid Engine (All versions \< V2026.0.0). (CVSS 7.8)
- [CVE-2025-40760](https://cve.now/CVE-2025-40760.md): A vulnerability has been identified in Altair Grid Engine (All versions \< V2026.0.0). (CVSS 5.5)
- [CVE-2025-40744](https://cve.now/CVE-2025-40744.md): A vulnerability has been identified in Solid Edge SE2025 (All versions \< V225.0 Update 11). (CVSS 7.5)
- [CVE-2024-32014](https://cve.now/CVE-2024-32014.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 4.7)
- [CVE-2024-32011](https://cve.now/CVE-2024-32011.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 8.8)
- [CVE-2024-32010](https://cve.now/CVE-2024-32010.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 7.8)
- [CVE-2024-32009](https://cve.now/CVE-2024-32009.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 7.8)
- [CVE-2024-32008](https://cve.now/CVE-2024-32008.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP12 Update 2). (CVSS 7.8)
- [CVE-2025-40812](https://cve.now/CVE-2025-40812.md): A vulnerability has been identified in Solid Edge SE2024 (All versions \< V224.0 Update 14), Solid Edge SE2025 (All versions \< V225.0 Update (CVSS 7.8)
- [CVE-2025-40811](https://cve.now/CVE-2025-40811.md): A vulnerability has been identified in Solid Edge SE2024 (All versions \< V224.0 Update 14), Solid Edge SE2025 (All versions \< V225.0 Update (CVSS 7.8)
- [CVE-2025-40810](https://cve.now/CVE-2025-40810.md): A vulnerability has been identified in Solid Edge SE2024 (All versions \< V224.0 Update 14), Solid Edge SE2025 (All versions \< V225.0 Update (CVSS 7.8)
- [CVE-2025-40809](https://cve.now/CVE-2025-40809.md): A vulnerability has been identified in Solid Edge SE2024 (All versions \< V224.0 Update 14), Solid Edge SE2025 (All versions \< V225.0 Update (CVSS 7.8)
- [CVE-2025-40774](https://cve.now/CVE-2025-40774.md): A vulnerability has been identified in SiPass integrated (All versions \< V3.0). (CVSS 4.4)
- [CVE-2025-40773](https://cve.now/CVE-2025-40773.md): A vulnerability has been identified in SiPass integrated (All versions \< V3.0). (CVSS 3.5)
- [CVE-2025-40772](https://cve.now/CVE-2025-40772.md): A vulnerability has been identified in SiPass integrated (All versions \< V3.0). (CVSS 7.4)
- [CVE-2025-40771](https://cve.now/CVE-2025-40771.md): A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions \< V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6 (CVSS 9.8)
- [CVE-2025-40765](https://cve.now/CVE-2025-40765.md): A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions \>= V3.1.2.2 \< V3.1.2.3). (CVSS 9.8)
- [CVE-2025-40755](https://cve.now/CVE-2025-40755.md): A vulnerability has been identified in SINEC NMS (All versions \< V4.0 SP1). (CVSS 8.8)
- [CVE-2011-20002](https://cve.now/CVE-2011-20002.md): A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. (CVSS 7.4)
- [CVE-2011-20001](https://cve.now/CVE-2011-20001.md): A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. (CVSS 7.5)
- [CVE-2025-40804](https://cve.now/CVE-2025-40804.md): A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). (CVSS 9.1)
- [CVE-2025-40803](https://cve.now/CVE-2025-40803.md): A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). (CVSS 3.1)
- [CVE-2025-40802](https://cve.now/CVE-2025-40802.md): A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). (CVSS 3.1)
- [CVE-2025-40798](https://cve.now/CVE-2025-40798.md): A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All v (CVSS 7.5)
- [CVE-2025-40797](https://cve.now/CVE-2025-40797.md): A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All v (CVSS 7.5)
- [CVE-2025-40796](https://cve.now/CVE-2025-40796.md): A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All v (CVSS 7.5)
- [CVE-2025-40795](https://cve.now/CVE-2025-40795.md): A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All v (CVSS 9.8)
- [CVE-2025-40757](https://cve.now/CVE-2025-40757.md): A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All versions), TALON TC S (CVSS 5.3)
- [CVE-2025-40594](https://cve.now/CVE-2025-40594.md): A vulnerability has been identified in SINAMICS G220 V6.4 (All versions \< V6.4 HF2), SINAMICS S200 V6.4 (All versions \< V6.4 HF7), SINAMICS (CVSS 6.3)
- [CVE-2025-40758](https://cve.now/CVE-2025-40758.md): A vulnerability has been identified in Mendix SAML (Mendix 10.12 compatible) (All versions \< V4.0.3), Mendix SAML (Mendix 10.21 compatible) (CVSS 8.7)
- [CVE-2025-40770](https://cve.now/CVE-2025-40770.md): A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). (CVSS 7.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/siemens
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.