CVE record · 3 sources
CVE-2026-44415
CVSS 9.1Affected systems do not properly restrict access to internal APIs and paths for authenticated users.
- Vendor
- Siemens
- Product
- SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal
- CVSS
- 9.1
- EPSS
- 0.005 (p41)
- Exposure class
- OT / ICS
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several…
-
Siemens Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path…
-
Affected systems do not properly restrict access to internal APIs and paths for authenticated users.
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be…