Skip to contentSiemens vulnerabilities
Products
Show 140 moreShow less
- Scalance M876-4 (nam)36
- Scalance S615 Lan-router36
- Solid Edge Se202336
- Tecnomatix Plant Simulation V220136
- Ruggedcom Rm1224 Lte(4g) Eu35
- Ruggedcom Rm1224 Lte(4g) Nam35
- Scalance M876-335
- Scalance Mum853-1 (eu)35
- Scalance Mum856-1 (eu)35
- Scalance Mum856-1 (row)35
- Simatic Wincc35
- Sppa-t3000 Ms3000 Migration Server35
- Sppa-t3000 Ms3000 Migration Server35
- Tecnomatix Plant Simulation35
- Simatic S7-plcsim Advanced33
- Solid Edge Se202133
- Jt Utilities32
- Jt Utilities32
- Scalance Wam766-1 Eec (us)32
- Scalance Wam766-1 (us)32
- Comos31
- Parasolid V34.031
- Scalance M812-1 Adsl-router31
- Scalance M816-1 Adsl-router31
- Scalance M876-431
- Scalance S615 Eec Lan-router31
- Scalance Wam763-131
- Scalance Wum763-131
- Scalance Xch32831
- Scalance Xcm32431
- Scalance Xcm32831
- Scalance Xcm33231
- Scalance Xrh334 (24 V Dc, 8xfo, Cc)31
- Scalance Xrm334 (230 V Ac, 12xfo)31
- Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (230 V Ac, 8xfo)31
- Scalance Xrm334 (24 V Dc, 12xfo)31
- Scalance Xrm334 (24v Dc, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (24 V Dc, 8xfo)31
- Scalance Xrm334 (2x230 V Ac, 12xfo)31
- Scalance Xrm334 (2x230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (2x230 V Ac, 8xfo)31
- Scalance Wam766-130
- Scalance Wam766-1 Eec30
- Scalance Wum766-130
- Scalance Wum766-1 (usa)30
- Jt Open Toolkit29
- Ruggedcom Crossbow29
- Simatic Ipc647e29
- Simatic Ipc847e29
- Solid Edge Se202229
- Teamcenter Visualization V13.228
- Scalance Lpe9403 Firmware27
- Simatic Field Pg M527
- Simatic Ipc427e27
- Simatic Ipc477e27
- Simatic Ipc477e Pro27
- Simatic Ipc627e27
- Simatic Ipc677e27
- Simatic Itp100027
- Parasolid V33.126
- Ruggedcom Rox Mx5000 Firmware26
- Ruggedcom Rox Rx1400 Firmware26
- Ruggedcom Rox Rx1500 Firmware26
- Ruggedcom Rox Rx1501 Firmware26
- Ruggedcom Rox Rx1510 Firmware26
- Ruggedcom Rox Rx1511 Firmware26
- Ruggedcom Rox Rx1512 Firmware26
- Ruggedcom Rox Rx5000 Firmware26
- Simatic Field Pg M626
- Simatic Pcs 726
- Simatic Pcs Neo26
- Simatic S7-1500 Cpu 1511-1 Pn26
- Simatic S7-1500 Cpu 1511f-1 Pn26
- Simatic S7-1500 Cpu 1513-1 Pn26
- Simatic S7-1500 Cpu 1513f-1 Pn26
- Simatic S7-1500 Cpu 1515-2 Pn26
- Simatic S7-1500 Cpu 1515f-2 Pn26
- Simatic S7-1500 Cpu 1516-3 Pn/dp26
- Simatic S7-1500 Cpu 1516f-3 Pn/dp26
- Nucleus Net25
- Nucleus Source Code25
- Simatic Ipc127e25
- Simatic Ipc227g25
- Simatic Ipc277g25
- Simatic Ipc277g Pro25
- Simatic Ipc327g25
- Simatic Ipc377g25
- Simatic Pcs725
- Simatic Wincc V7.525
- Siplus Et 200sp Cpu 1512sp F-1 Pn25
- Siplus Ipc427e25
- Siplus S7-1500 Cpu 1511-1 Pn25
- Siplus S7-1500 Cpu 1511f-1 Pn25
- Siplus S7-1500 Cpu 1513-1 Pn25
- Siplus S7-1500 Cpu 1513f-1 Pn25
- Siplus S7-1500 Cpu 1516-3 Pn/dp25
- Siplus S7-1500 Cpu 1516f-3 Pn/dp25
- Scalance Lpe940324
- Scalance S615 Firmware24
- Sicam T24
- Simatic Drive Controller Cpu 1504d Tf24
- Simatic Drive Controller Cpu 1507d Tf24
- Simatic Ipc427e Firmware24
- Simatic Ipc477e Firmware24
- Simatic Itp1000 Firmware24
- Simatic S7-1500 Cpu 1511c-1 Pn24
- Simatic S7-1500 Cpu 1511t-1 Pn24
- Simatic S7-1500 Cpu 1511tf-1 Pn24
- Simatic S7-1500 Cpu 1512c-1 Pn24
- Simatic S7-1500 Cpu 1515t-2 Pn24
- Simatic S7-1500 Cpu 1515tf-2 Pn24
- Simatic S7-1500 Cpu 1516t-3 Pn/dp24
- Simatic S7-1500 Cpu 1516tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1517-3 Pn/dp24
- Simatic S7-1500 Cpu 1517f-3 Pn/dp24
- Simatic S7-1500 Cpu 1517t-3 Pn/dp24
- Simatic S7-1500 Cpu 1517tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1518-4 Pn/dp24
- Simatic S7-1500 Cpu 1518f-4 Pn/dp24
- Simatic S7-1500 Cpu 1518t-4 Pn/dp24
- Simatic S7-1500 Cpu 1518tf-4 Pn/dp24
- Siplus S7-1500 Cpu 1518-4 Pn/dp24
- Siplus S7-1500 Cpu 1518f-4 Pn/dp24
- Scalance W721-1 Rj4523
- Scalance W722-1 Rj4523
- Scalance W734-1 Rj4523
- Scalance W734-1 Rj45 (usa)23
- Scalance W738-1 M1223
- Scalance W748-1 M1223
- Scalance W748-1 Rj4523
- Scalance W761-1 Rj4523
- Scalance W774-1 M12 Eec23
- Scalance W774-1 Rj4523
- Scalance W774-1 Rj45 (usa)23
- Scalance W778-1 M1223
- Scalance W778-1 M12 Eec23
- Scalance W778-1 M12 Eec (usa)23
- Scalance W786-1 Rj4523
- Scalance W786-2ia Rj4523
Newest
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0CVE-2026-319814.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server AgentCVE-2026-02887.2 High
- haarg http::tiny, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreHTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targetsCVE-2026-7017Fix available7.1 High
- linux kernel, linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 more +3 moreipv6: account for fraggap on the paged allocation pathCVE-2026-53362In KEVPublic exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()CVE-2026-53358Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/i915/gem: Fix phys BO pread/pwrite with offsetCVE-2026-53356Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moresignal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()CVE-2026-53352Fix available4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreASoC: wm_adsp: Fix NULL dereference when removing firmware controlsCVE-2026-53350Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_conntrack: destroy stale expectfn expectations on unregisterCVE-2026-53349Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: bonding: fix NULL pointer dereference in bond_do_ioctl()CVE-2026-53337Fix available5.5 Medium
- siemens mendix studio pro 10.11, mendix studio pro 10.12, mendix studio pro 10.13 +23 more +25 moreA vulnerability has been identified in Mendix Studio Pro 10.11 (All versions), Mendix Studio Pro...CVE-2026-481926.8 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreagp/amd64: Fix broken error propagation in agp_amd64_probe()CVE-2026-53325Fix available5.5 Medium
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 - Free of Uninitialized Pointer in publickey List CleanupCVE-2026-58051Fix available8.3 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremailbox: add sanity check for channel arrayCVE-2026-53295Fix available5.5 Medium
- nrwl nxNx: `nx graph` dev server permissive CORS policyCVE-2026-54753Fix available5.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv6: mcast: Fix use-after-free when processing MLD queriesCVE-2026-53275Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: synproxy: add mutex to guard hook reference countingCVE-2026-53269Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: conntrack_irc: fix possible out-of-bounds readCVE-2026-53268Fix available8.2 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm cache policy smq: check allocation under invalidate lockCVE-2026-53265Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/sched: act_api: use RCU with deferred freeing for action lifecycleCVE-2026-53264Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more6lowpan: fix off-by-one in multicast context address compressionCVE-2026-53263Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()CVE-2026-53256Fix available8.0 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: MGMT: validate advertising TLV before type checksCVE-2026-53255Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: RFCOMM: validate skb length in MCC handlersCVE-2026-53254Fix available8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: bnep: reject short frames before parsingCVE-2026-53253Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv4: restrict IPOPT_SSRR and IPOPT_LSRR optionsCVE-2026-53249Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattrCVE-2026-53245Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streamsCVE-2026-53242Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()CVE-2026-53239Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moretcp: restrict SO_ATTACH_FILTER to priv usersCVE-2026-53236Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipv6: sit: reload inner IPv6 header after GSO offloadsCVE-2026-53228Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: openvswitch: fix possible kfree_skb of ERR_PTRCVE-2026-53227Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: fix uninit-value in __sctp_rcv_asconf_lookup()CVE-2026-53225Fix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: guard timestamp cmsgs to real error queue skbsCVE-2026-53223Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()CVE-2026-53221Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: x_tables: avoid leaking percpu counter pointersCVE-2026-53219Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nft_exthdr: fix register tracking for F_PRESENT flagCVE-2026-53218Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nft_tunnel: fix use-after-free on object destroyCVE-2026-53212Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsigCVE-2026-53208Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCELCVE-2026-53198Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: timer: Fix UAF at snd_timer_user_params()CVE-2026-53192Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreudp: clear skb->dev before running a sockmap verdictCVE-2026-53184Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremptcp: allow subflow rcv wnd to shrinkCVE-2026-53183Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevsock/vmci: fix sk_ack_backlog leak on failed handshakeCVE-2026-53181Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebnxt_en: Fix NULL pointer dereferenceCVE-2026-53177Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: reject fuse_notify() pagecache ops on directoriesCVE-2026-53168Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: limit FUSE_NOTIFY_RETRIEVE to uptodate foliosCVE-2026-53167Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Reject zero-length property entries in validatorCVE-2026-53150Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Bound root directory content to block sizeCVE-2026-53149Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morethunderbolt: Clamp XDomain response data copy to allocation sizeCVE-2026-53148Fix available7.8 High
- Show moreLoading…