CVE record · 2 sources
CVE-2026-33920
CVSS 3.5A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the…
- Vendor
- Siemens
- Product
- SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal
- CVSS
- 3.5
- Exposure class
- OT / ICS
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Siemens RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to…
-
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the…
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly…