Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

22 matching records, 1 with confirmed exploitation.

1. 65
   KEV NVD 16d ago

   Siemens Software Center Uncontrolled Search Path Element Vulnerability

   Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to…

   KEV · due 3 Nov 2026 CVSS 6.7 Fix available CVE-2026-110936 Siemens OT / ICS
2. 27
   CVE NVD 18d ago

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could…

   CVSS 7.5 CVE-2026-89201 Siemens OT / ICS
3. 27
   CVE NVD 18d ago

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated…

   CVSS 8.8 CVE-2026-89199 Siemens OT / ICS
4. 27
   CVE NVD 18d ago

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated…

   CVSS 8.8 CVE-2026-89198 Siemens OT / ICS
5. 27
   CVE NVD 18d ago

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile…

   CVSS 8.8 CVE-2026-89197 Siemens OT / ICS
6. 27
   CVE NVD 18d ago

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an…

   CVSS 8.8 CVE-2026-89196 Siemens OT / ICS
7. 27
   CVE NVD 18d ago

   A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).

   A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to…

   CVSS 7.4 CVE-2026-78556 Siemens OT / ICS
8. 27
   CVE NVD 18d ago

   A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC)…

   A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC…

   CVSS 7.5 CVE-2026-102076 Siemens OT / ICS
9. 27
   CVE NVD 18d ago

   A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC)…

   A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC…

   CVSS 7.5 CVE-2026-102075 Siemens OT / ICS
10. 27
    CVE NVD 18d ago

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC)…

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC…

    CVSS 7.5 CVE-2026-102074 Siemens OT / ICS
11. 27
    CVE NVD 18d ago

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC)…

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC…

    CVSS 8.2 CVE-2026-102073 Siemens OT / ICS
12. 21
    CVE NVD 18d ago

    A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).

    A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This…

    CVSS 7.5 CVE-2026-85114 Siemens OT / ICS
13. 20
    CVE NVD 18d ago

    A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303)…

    A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3)…

    CVSS 5.3 CVE-2026-89208 Siemens OT / ICS
14. 20
    CVE NVD 18d ago

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an…

    CVSS 6.3 CVE-2026-89206 Siemens OT / ICS
15. 20
    CVE NVD 18d ago

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an…

    CVSS 6.3 CVE-2026-89205 Siemens OT / ICS
16. 20
    CVE NVD 18d ago

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read…

    CVSS 5.4 CVE-2026-89204 Siemens OT / ICS
17. 20
    CVE NVD 18d ago

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not…

    CVSS 4.3 CVE-2026-89203 Siemens OT / ICS
18. 20
    CVE NVD 18d ago

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with…

    CVSS 6.5 CVE-2026-89202 Siemens OT / ICS
19. 20
    CVE NVD 18d ago

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated…

    CVSS 6.7 CVE-2026-89200 Siemens OT / ICS
20. 20
    CVE NVD 18d ago

    A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit…

    A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit…

    CVSS 6.8 CVE-2026-44414 Siemens OT / ICS
21. 14
    CVE NVD 18d ago

    A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62).

    A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could…

    CVSS 5.5 CVE-2026-85115 Siemens OT / ICS
22. 10
    CVE NVD 5d ago

    A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions <…

    A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 9 compatible) (All versions < V3.6.29). Affected…

    CVSS 6.8 CVE-2026-89209 Siemens OT / ICS

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Siemens&limit=100. RSS for this section: feed.xml.