Live · 98 sources · updated 13m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 3 sources

CVE-2026-44415

CVSS 9.1

Affected systems do not properly restrict access to internal APIs and paths for authenticated users.

Vendor
Siemens
Product
SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal
CVSS
9.1
EPSS
0.005 (p41)
Exposure class
OT / ICS

Coverage

3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. CISA advisory CISA

    Siemens Industrial Edge Devices

    Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several…

    CVSS 3.1 Fix available CVE-2026-44414CVE-2026-44415 Siemens
  2. ICS advisory CISA

    Siemens Industrial Edge Device Kit

    Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path…

    CVSS 3.1 Fix available CVE-2026-44414CVE-2026-44415 Siemens
  3. CVE NVD

    Affected systems do not properly restrict access to internal APIs and paths for authenticated users.

    Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be…

    CVSS 9.1 CVE-2026-44415

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help