CVE-2026-33389

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS

7.5

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 9d ago

   Siemens RUGGEDCOM APE1808 Devices

   Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to…

   CVSS 3.1 CVE-2026-33387CVE-2026-33388CVE-2026-33389+2 more Siemens
2. 10
   CVE NVD 8 Sep 2026

   An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections…

   An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option…

   CVSS 7.5 CVE-2026-33389