Siemens vulnerabilities
1,854 CVEs and advisories name Siemens as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-41918A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0).
- CVE-2026-42177linux-entra-sso: PRT SSO cookie can leak to attacker-controlled hosts when broad host permissions are granted
- CVE-2025-12659Heap-based buffer overflow in Siemens Simcenter Femap
- CVE-2026-44412A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).
- CVE-2026-44411A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).
- CVE-2026-41551A vulnerability has been identified in ROS# (All versions < V2.2.2).
- CVE-2026-41125A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All
- CVE-2026-33893A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcente
- CVE-2026-33862A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcente
- CVE-2026-27662Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in p
- CVE-2026-25789Affected devices do not properly validate and sanitize filenames on the Firmware Update page.
- CVE-2026-25787Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the
- CVE-2026-25786Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface
- CVE-2026-22925A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).
- CVE-2026-22924A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).
- CVE-2025-40949A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGE
- CVE-2025-40948A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGE
- CVE-2025-40947A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGE
- CVE-2025-40946A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 1
- CVE-2025-40833The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests.
- CVE-2024-54017A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5
- CVE-2026-33892A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro
- CVE-2026-27668A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8).
- CVE-2026-25654A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).
- CVE-2026-24032A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC).
- CVE-2025-40745A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcente
- CVE-2026-27664A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V
- CVE-2026-27663A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.
- CVE-2026-27661A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).
- CVE-2026-25605A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).