Skip to content

CVE record · 2 sources

CVE-2026-33388

CVSS 7.4

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.

Vendor: Siemens
Product: SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal
CVSS: 7.4
Exposure class: OT / ICS

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CISA advisory CISA 9d ago

Siemens RUGGEDCOM APE1808 Devices

Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to…

CVSS 3.1 CVE-2026-33387 CVE-2026-33388 CVE-2026-33389+2 more Siemens
10

CVE NVD 8 Sep 2026

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the…

CVSS 7.4 CVE-2026-33388