CVE-2026-85114

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS

7.5

EPSS

0.003 (p26)

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 26
   CISA advisory CISA 9d ago

   Siemens SIMATIC S7 Webserver API

   .NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has…

   CVSS 3.1 Fix available CVE-2026-85114CVE-2026-85115 Siemens
2. 21
   CVE NVD 18d ago

   A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).

   A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This…

   CVSS 7.5 CVE-2026-85114 Siemens