Siemens Nx vulnerabilities

• @nx gradle, maven, nrwl nx +2 more Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle CVE-2026-119282 Fix available 7.3 HighOctober 29, 2026
• php, paloaltonetworks pan-os, panorama virtual appliance +111 more +113 more RCE via stale global state CVE-2026-109619 In KEVPublic exploitFix available EPSS 100.0% 9.2 CriticalOctober 21, 2026
• php, paloaltonetworks pan-os, panorama virtual appliance +110 more +112 more RCE via OOM corruption CVE-2026-109618 In KEVPublic exploitFix available EPSS 100.0% 9.2 CriticalOctober 21, 2026
• nrwl nx Nx: OS command injection in the @nx/docker release pipeline CVE-2026-104859 Fix available 7.3 HighOctober 2, 2026
• nrwl nx Nx daemon and plugin worker sockets are accessible to other local users CVE-2026-104854 Fix available 8.5 HighOctober 2, 2026
• nrwl nx Nx: Path traversal in nx migrate package-migrations extraction CVE-2026-104853 Fix available 5.8 MediumOctober 2, 2026
• nrwl nx Nx: Zip-Slip in the self-hosted remote cache CVE-2026-71476 Fix available 8.7 HighAugust 6, 2026
• siemens comos v10.4.5, comos v10.6, designcenter nx +13 more +15 more A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 ... CVE-2025-40945 8.5 HighJuly 14, 2026
• nrwl nx Nx: `nx graph` dev server permissive CORS policy CVE-2026-54753 Fix available 5.9 MediumJune 26, 2026
• siemens blueplanet 100 nx3 m8, blueplanet 100 tl3 gen2, blueplanet 105 tl3 +26 more +28 more A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3... CVE-2026-41125 5.9 MediumMay 12, 2026
• siemens blueplanet 100 nx3 m8, blueplanet 100 tl3 gen2, blueplanet 105 tl3 +27 more +29 more A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3... CVE-2025-40946 7.2 HighMay 12, 2026
• andybalholm brotli, 7-zip p7zip, anthropic bun +100 more +102 more Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 In KEVPublic exploitFix available EPSS 82.6% 9.2 CriticalApril 27, 2026
• siemens nx, nx (managed mode) +1 more A vulnerability has been identified in NX (All versions < V2512). The affected application... CVE-2026-22923 7.3 HighFebruary 10, 2026
• siemens comos v10.6, jt bi-directional translator for step, nx v2412 +6 more +8 more A vulnerability has been identified in COMOS V10.6 (All versions), COMOS V10.6 (All versions), JT... CVE-2025-40801 9.2 CriticalDecember 9, 2025
• siemens comos v10.6, nx v2412, nx v2506 +4 more +6 more A vulnerability has been identified in COMOS V10.6 (All versions), COMOS V10.6 (All versions), NX... CVE-2025-40800 9.1 CriticalDecember 9, 2025
• siemens nx, nx 1988 firmware +1 more A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications... CVE-2024-41908 7.3 HighAugust 13, 2024
• agilepoint nx AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal CVE-2023-31179 6.5 MediumMay 8, 2023
• agilepoint nx AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete CVE-2023-31178 8.1 HighMay 8, 2023
• agilepoint nx AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload CVE-2023-24507 8.8 HighMay 8, 2023
• apache log4j, log4j2, cvat computer vision annotation tool +53 more +55 more Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack CVE-2021-45046 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalDecember 14, 2021
• apache log4j, log4j2, apple xcode +141 more +143 more Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints CVE-2021-44228 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalDecember 10, 2021
• siemens nx 1953 series, nx 1980 series, solid edge se2021 +7 more +9 more A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected... CVE-2021-41538 3.3 LowSeptember 28, 2021
• siemens nx 1953 series, nx 1980 series, solid edge se2021 +7 more +9 more A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected... CVE-2021-41535 7.8 HighSeptember 28, 2021
• siemens nx 1980 series, solid edge se2021, solid edge +2 more +4 more A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected... CVE-2021-41534 3.3 LowSeptember 28, 2021
• siemens nx 1980 series, solid edge se2021, solid edge +2 more +4 more A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected... CVE-2021-41533 3.3 LowSeptember 28, 2021
• siemens nx 1980 series, nx 1980, solid edge se2021 +1 more +3 more A vulnerability has been identified in NX 1980 Series (All versions < V1984). The... CVE-2021-37203 7.1 HighSeptember 14, 2021
• siemens nx 1980 series, nx 1980, solid edge se2021 +1 more +3 more A vulnerability has been identified in NX 1980 Series (All versions < V1984). The IFC adapter in... CVE-2021-37202 7.8 HighSeptember 14, 2021
• siemens sinumerik analyse mycondition, sinumerik analyze myperformance, sinumerik analyze myperformance /oee-monitor +27 more +29 more A vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK... CVE-2021-31892 7.4 HighJuly 13, 2021
• siemens sinamics perfect harmony gh180 with nxg i control, mlfbs: 6sr2...-, 6sr3...-, 6sr4...-, siemens ag sinamics perfect harmony gh180 with nxg ii control, mlfbs: 6sr2...-, 6sr3...-, 6sr4...-, siemens sinamics perfect harmony gh180 with nxg i control mlfb 6sr2 firmware +5 more +7 more A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs:... CVE-2019-6578 7.5 HighMay 14, 2019
• siemens sinamics perfect harmony gh180 with nxg i control, mlfbs: 6sr2...-, 6sr3...-, 6sr4...-, siemens ag sinamics perfect harmony gh180 with nxg ii control, mlfbs: 6sr2...-, 6sr3...-, 6sr4...-, siemens sinamics perfect harmony gh180 with nxg i control mlfb 6sr2 firmware +5 more +7 more A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs:... CVE-2019-6574 7.5 HighMay 14, 2019