Siemens vulnerabilities
1,854 CVEs and advisories name Siemens as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-63356Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messa
- CVE-2026-63355Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the
- CVE-2026-63354Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the T
- CVE-2026-63353Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.
- CVE-2026-63352Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page
- CVE-2026-63351Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before
- CVE-2026-63350Affected devices do not properly restrict executable content contained in imported trace files.
- CVE-2026-59241A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC
- CVE-2026-44415Affected systems do not properly restrict access to internal APIs and paths for authenticated users.
- CVE-2026-44414A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device
- CVE-2026-89207A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17
- CVE-2026-67367A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4),
- CVE-2026-62654A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-62653A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-62652A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-62650A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-62649A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-62648A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-62647A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-62646A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-62645A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
- CVE-2026-58113A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcente
- CVE-2026-50093A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All version
- CVE-2026-34223A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC
- CVE-2026-80465A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All v
- CVE-2026-66155A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element
- CVE-2026-54548kas: Persistent SSH Host Key Checking Disablement
- CVE-2026-47192kas's late signature validation may allow unnoticed repository manipulations
- CVE-2026-47191kas checks out SHA-like git branches as valid commits
- CVE-2026-69109A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3).