Skip to contentSiemens vulnerabilities
Products
Show 140 moreShow less
- Scalance M876-4 (nam)36
- Scalance S615 Lan-router36
- Solid Edge Se202336
- Tecnomatix Plant Simulation V220136
- Ruggedcom Rm1224 Lte(4g) Eu35
- Ruggedcom Rm1224 Lte(4g) Nam35
- Scalance M876-335
- Scalance Mum853-1 (eu)35
- Scalance Mum856-1 (eu)35
- Scalance Mum856-1 (row)35
- Simatic Wincc35
- Sppa-t3000 Ms3000 Migration Server35
- Sppa-t3000 Ms3000 Migration Server35
- Tecnomatix Plant Simulation35
- Simatic S7-plcsim Advanced33
- Solid Edge Se202133
- Jt Utilities32
- Jt Utilities32
- Scalance Wam766-1 Eec (us)32
- Scalance Wam766-1 (us)32
- Comos31
- Parasolid V34.031
- Scalance M812-1 Adsl-router31
- Scalance M816-1 Adsl-router31
- Scalance M876-431
- Scalance S615 Eec Lan-router31
- Scalance Wam763-131
- Scalance Wum763-131
- Scalance Xch32831
- Scalance Xcm32431
- Scalance Xcm32831
- Scalance Xcm33231
- Scalance Xrh334 (24 V Dc, 8xfo, Cc)31
- Scalance Xrm334 (230 V Ac, 12xfo)31
- Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (230 V Ac, 8xfo)31
- Scalance Xrm334 (24 V Dc, 12xfo)31
- Scalance Xrm334 (24v Dc, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (24 V Dc, 8xfo)31
- Scalance Xrm334 (2x230 V Ac, 12xfo)31
- Scalance Xrm334 (2x230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (2x230 V Ac, 8xfo)31
- Scalance Wam766-130
- Scalance Wam766-1 Eec30
- Scalance Wum766-130
- Scalance Wum766-1 (usa)30
- Jt Open Toolkit29
- Ruggedcom Crossbow29
- Simatic Ipc647e29
- Simatic Ipc847e29
- Solid Edge Se202229
- Teamcenter Visualization V13.228
- Scalance Lpe9403 Firmware27
- Simatic Field Pg M527
- Simatic Ipc427e27
- Simatic Ipc477e27
- Simatic Ipc477e Pro27
- Simatic Ipc627e27
- Simatic Ipc677e27
- Simatic Itp100027
- Parasolid V33.126
- Ruggedcom Rox Mx5000 Firmware26
- Ruggedcom Rox Rx1400 Firmware26
- Ruggedcom Rox Rx1500 Firmware26
- Ruggedcom Rox Rx1501 Firmware26
- Ruggedcom Rox Rx1510 Firmware26
- Ruggedcom Rox Rx1511 Firmware26
- Ruggedcom Rox Rx1512 Firmware26
- Ruggedcom Rox Rx5000 Firmware26
- Simatic Field Pg M626
- Simatic Pcs 726
- Simatic Pcs Neo26
- Simatic S7-1500 Cpu 1511-1 Pn26
- Simatic S7-1500 Cpu 1511f-1 Pn26
- Simatic S7-1500 Cpu 1513-1 Pn26
- Simatic S7-1500 Cpu 1513f-1 Pn26
- Simatic S7-1500 Cpu 1515-2 Pn26
- Simatic S7-1500 Cpu 1515f-2 Pn26
- Simatic S7-1500 Cpu 1516-3 Pn/dp26
- Simatic S7-1500 Cpu 1516f-3 Pn/dp26
- Nucleus Net25
- Nucleus Source Code25
- Simatic Ipc127e25
- Simatic Ipc227g25
- Simatic Ipc277g25
- Simatic Ipc277g Pro25
- Simatic Ipc327g25
- Simatic Ipc377g25
- Simatic Pcs725
- Simatic Wincc V7.525
- Siplus Et 200sp Cpu 1512sp F-1 Pn25
- Siplus Ipc427e25
- Siplus S7-1500 Cpu 1511-1 Pn25
- Siplus S7-1500 Cpu 1511f-1 Pn25
- Siplus S7-1500 Cpu 1513-1 Pn25
- Siplus S7-1500 Cpu 1513f-1 Pn25
- Siplus S7-1500 Cpu 1516-3 Pn/dp25
- Siplus S7-1500 Cpu 1516f-3 Pn/dp25
- Scalance Lpe940324
- Scalance S615 Firmware24
- Sicam T24
- Simatic Drive Controller Cpu 1504d Tf24
- Simatic Drive Controller Cpu 1507d Tf24
- Simatic Ipc427e Firmware24
- Simatic Ipc477e Firmware24
- Simatic Itp1000 Firmware24
- Simatic S7-1500 Cpu 1511c-1 Pn24
- Simatic S7-1500 Cpu 1511t-1 Pn24
- Simatic S7-1500 Cpu 1511tf-1 Pn24
- Simatic S7-1500 Cpu 1512c-1 Pn24
- Simatic S7-1500 Cpu 1515t-2 Pn24
- Simatic S7-1500 Cpu 1515tf-2 Pn24
- Simatic S7-1500 Cpu 1516t-3 Pn/dp24
- Simatic S7-1500 Cpu 1516tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1517-3 Pn/dp24
- Simatic S7-1500 Cpu 1517f-3 Pn/dp24
- Simatic S7-1500 Cpu 1517t-3 Pn/dp24
- Simatic S7-1500 Cpu 1517tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1518-4 Pn/dp24
- Simatic S7-1500 Cpu 1518f-4 Pn/dp24
- Simatic S7-1500 Cpu 1518t-4 Pn/dp24
- Simatic S7-1500 Cpu 1518tf-4 Pn/dp24
- Siplus S7-1500 Cpu 1518-4 Pn/dp24
- Siplus S7-1500 Cpu 1518f-4 Pn/dp24
- Scalance W721-1 Rj4523
- Scalance W722-1 Rj4523
- Scalance W734-1 Rj4523
- Scalance W734-1 Rj45 (usa)23
- Scalance W738-1 M1223
- Scalance W748-1 M1223
- Scalance W748-1 Rj4523
- Scalance W761-1 Rj4523
- Scalance W774-1 M12 Eec23
- Scalance W774-1 Rj4523
- Scalance W774-1 Rj45 (usa)23
- Scalance W778-1 M1223
- Scalance W778-1 M12 Eec23
- Scalance W778-1 M12 Eec (usa)23
- Scalance W786-1 Rj4523
- Scalance W786-2ia Rj4523
Newest
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevirtio-net: fix len check in receive_big()CVE-2026-64552Fix available8.4 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet, bpf: check master for NULL in xdp_master_redirect()CVE-2026-64545Fix available7.5 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreipv6: Fix null-ptr-deref in fib6_nh_mtu_change().CVE-2026-64538Fix available5.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreio_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work itemCVE-2026-64425Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: igmp: remove multicast group from hash table on device destructionCVE-2026-64423Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizesCVE-2026-64422Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: zero chainstack arrayCVE-2026-64413Fix available7.0 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: module names must be null-terminatedCVE-2026-64412Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: terminate table name before find_table_lock()CVE-2026-64411Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: protect ptrace_may_access() with exec_update_lock (FD links)CVE-2026-64375Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: protect ptrace_may_access() with exec_update_lock (part 1)CVE-2026-64371Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error pathCVE-2026-64370Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreisofs: bound Rock Ridge symlink components to the SL recordCVE-2026-64317Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morei2c: core: fix adapter deregistration raceCVE-2026-64279Fix available7.8 High
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 Heap Out-of-Bounds Read via publickey subsystemCVE-2026-66034Fix available7.7 High
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 Double-Free Heap Corruption via sftp_open()CVE-2026-66032Fix available8.7 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreblock: Avoid mounting the bdev pseudo-filesystem in userspaceCVE-2026-63810Fix available6.8 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morei2c: core: fix adapter registration raceCVE-2026-53400Fix available7.8 High
- fortinet fortios, fortiproxy, fortipam +2 more +4 moreA buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7...CVE-2026-598404.1 Medium
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 moreA buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7...CVE-2025-438924.1 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2026-235736.1 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...CVE-2026-598395.0 Medium
- fortinet fortios, fortiproxy, fortipam +1 more +3 moreAn Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')...CVE-2025-628263.1 Low
- fortinet fortios, fortiproxy, fortipam +1 more +3 moreAn Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')...CVE-2025-626753.4 Low
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2...CVE-2026-598375.9 Medium
- milestone systems xprotect management server, siemens siveillance video v2023 r3, siveillance video v2024 r1 +1 more +3 moreRemote Code Execution by administrative user on the Management ServerCVE-2026-30146.4 Medium
- siemens opcenter xA vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications...CVE-2026-5645110.0 Critical
- siemens simatic s7-plcsim advancedA vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected...CVE-2026-544296.0 Medium
- siemens comos v10.4.5, comos v10.6, designcenter nx +13 more +15 moreA vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 ...CVE-2025-409458.5 High
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra…CVE-2026-13221Fix available9.1 Critical
- perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpackCVE-2026-57432Fix available8.4 High
- haarg storable, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreStorable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK recordCVE-2026-57433Fix available9.8 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Multiple Cross-Site Scripting (XSS) VulnerabilitiesCVE-2026-02791.3 Low
- palo alto networks cloud ngfw, pan-os, panorama +2 more +4 morePAN-OS: IPv6 Firewall Policy BypassCVE-2026-02801.7 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Information Disclosure Vulnerability in Management Web InterfaceCVE-2026-02812.1 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: File Deletion Vulnerability in Management Web InterfaceCVE-2026-02822.7 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)CVE-2026-02834.5 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)CVE-2026-02844.7 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Server-Side Request Forgery Vulnerability in Management Web InterfaceCVE-2026-02854.7 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Command Injection in CLICVE-2026-02866.0 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic ProcessingCVE-2026-02876.6 Medium
- python, python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreIncremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarationsCVE-2026-15308Fix available8.7 High
- siemens cpci85 central processing/communication, sicore base system +1 moreA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <...CVE-2026-548018.6 High
- siemens cpci85 central processing/communication, sicore base system +1 moreA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <...CVE-2026-548006.3 Medium
- siemens cpci85 central processing/communication, sicore base system +1 moreA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <...CVE-2026-547998.4 High
- siemens cpci85 central processing/communication, sicore base system +1 moreA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <...CVE-2026-547987.1 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreIncorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0CVE-2026-333907.2 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreDoS through oversized audit log entries in Guardian/CMC before 26.2.0CVE-2026-319848.7 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreMissing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0CVE-2026-319836.9 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreOpen Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0CVE-2026-319825.3 Medium
- Show moreLoading…