Skip to contentSiemens vulnerabilities
Products
Show 140 moreShow less
- Scalance M876-4 (nam)36
- Scalance S615 Lan-router36
- Solid Edge Se202336
- Tecnomatix Plant Simulation V220136
- Ruggedcom Rm1224 Lte(4g) Eu35
- Ruggedcom Rm1224 Lte(4g) Nam35
- Scalance M876-335
- Scalance Mum853-1 (eu)35
- Scalance Mum856-1 (eu)35
- Scalance Mum856-1 (row)35
- Simatic Wincc35
- Sppa-t3000 Ms3000 Migration Server35
- Sppa-t3000 Ms3000 Migration Server35
- Tecnomatix Plant Simulation35
- Simatic S7-plcsim Advanced33
- Solid Edge Se202133
- Jt Utilities32
- Jt Utilities32
- Scalance Wam766-1 Eec (us)32
- Scalance Wam766-1 (us)32
- Comos31
- Parasolid V34.031
- Scalance M812-1 Adsl-router31
- Scalance M816-1 Adsl-router31
- Scalance M876-431
- Scalance S615 Eec Lan-router31
- Scalance Wam763-131
- Scalance Wum763-131
- Scalance Xch32831
- Scalance Xcm32431
- Scalance Xcm32831
- Scalance Xcm33231
- Scalance Xrh334 (24 V Dc, 8xfo, Cc)31
- Scalance Xrm334 (230 V Ac, 12xfo)31
- Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (230 V Ac, 8xfo)31
- Scalance Xrm334 (24 V Dc, 12xfo)31
- Scalance Xrm334 (24v Dc, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (24 V Dc, 8xfo)31
- Scalance Xrm334 (2x230 V Ac, 12xfo)31
- Scalance Xrm334 (2x230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (2x230 V Ac, 8xfo)31
- Scalance Wam766-130
- Scalance Wam766-1 Eec30
- Scalance Wum766-130
- Scalance Wum766-1 (usa)30
- Jt Open Toolkit29
- Ruggedcom Crossbow29
- Simatic Ipc647e29
- Simatic Ipc847e29
- Solid Edge Se202229
- Teamcenter Visualization V13.228
- Scalance Lpe9403 Firmware27
- Simatic Field Pg M527
- Simatic Ipc427e27
- Simatic Ipc477e27
- Simatic Ipc477e Pro27
- Simatic Ipc627e27
- Simatic Ipc677e27
- Simatic Itp100027
- Parasolid V33.126
- Ruggedcom Rox Mx5000 Firmware26
- Ruggedcom Rox Rx1400 Firmware26
- Ruggedcom Rox Rx1500 Firmware26
- Ruggedcom Rox Rx1501 Firmware26
- Ruggedcom Rox Rx1510 Firmware26
- Ruggedcom Rox Rx1511 Firmware26
- Ruggedcom Rox Rx1512 Firmware26
- Ruggedcom Rox Rx5000 Firmware26
- Simatic Field Pg M626
- Simatic Pcs 726
- Simatic Pcs Neo26
- Simatic S7-1500 Cpu 1511-1 Pn26
- Simatic S7-1500 Cpu 1511f-1 Pn26
- Simatic S7-1500 Cpu 1513-1 Pn26
- Simatic S7-1500 Cpu 1513f-1 Pn26
- Simatic S7-1500 Cpu 1515-2 Pn26
- Simatic S7-1500 Cpu 1515f-2 Pn26
- Simatic S7-1500 Cpu 1516-3 Pn/dp26
- Simatic S7-1500 Cpu 1516f-3 Pn/dp26
- Nucleus Net25
- Nucleus Source Code25
- Simatic Ipc127e25
- Simatic Ipc227g25
- Simatic Ipc277g25
- Simatic Ipc277g Pro25
- Simatic Ipc327g25
- Simatic Ipc377g25
- Simatic Pcs725
- Simatic Wincc V7.525
- Siplus Et 200sp Cpu 1512sp F-1 Pn25
- Siplus Ipc427e25
- Siplus S7-1500 Cpu 1511-1 Pn25
- Siplus S7-1500 Cpu 1511f-1 Pn25
- Siplus S7-1500 Cpu 1513-1 Pn25
- Siplus S7-1500 Cpu 1513f-1 Pn25
- Siplus S7-1500 Cpu 1516-3 Pn/dp25
- Siplus S7-1500 Cpu 1516f-3 Pn/dp25
- Scalance Lpe940324
- Scalance S615 Firmware24
- Sicam T24
- Simatic Drive Controller Cpu 1504d Tf24
- Simatic Drive Controller Cpu 1507d Tf24
- Simatic Ipc427e Firmware24
- Simatic Ipc477e Firmware24
- Simatic Itp1000 Firmware24
- Simatic S7-1500 Cpu 1511c-1 Pn24
- Simatic S7-1500 Cpu 1511t-1 Pn24
- Simatic S7-1500 Cpu 1511tf-1 Pn24
- Simatic S7-1500 Cpu 1512c-1 Pn24
- Simatic S7-1500 Cpu 1515t-2 Pn24
- Simatic S7-1500 Cpu 1515tf-2 Pn24
- Simatic S7-1500 Cpu 1516t-3 Pn/dp24
- Simatic S7-1500 Cpu 1516tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1517-3 Pn/dp24
- Simatic S7-1500 Cpu 1517f-3 Pn/dp24
- Simatic S7-1500 Cpu 1517t-3 Pn/dp24
- Simatic S7-1500 Cpu 1517tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1518-4 Pn/dp24
- Simatic S7-1500 Cpu 1518f-4 Pn/dp24
- Simatic S7-1500 Cpu 1518t-4 Pn/dp24
- Simatic S7-1500 Cpu 1518tf-4 Pn/dp24
- Siplus S7-1500 Cpu 1518-4 Pn/dp24
- Siplus S7-1500 Cpu 1518f-4 Pn/dp24
- Scalance W721-1 Rj4523
- Scalance W722-1 Rj4523
- Scalance W734-1 Rj4523
- Scalance W734-1 Rj45 (usa)23
- Scalance W738-1 M1223
- Scalance W748-1 M1223
- Scalance W748-1 Rj4523
- Scalance W761-1 Rj4523
- Scalance W774-1 M12 Eec23
- Scalance W774-1 Rj4523
- Scalance W774-1 Rj45 (usa)23
- Scalance W778-1 M1223
- Scalance W778-1 M12 Eec23
- Scalance W778-1 M12 Eec (usa)23
- Scalance W786-1 Rj4523
- Scalance W786-2ia Rj4523
Newest
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreIncorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0CVE-2026-333886.4 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreInsufficient sanitization of Dashboards in Guardian/CMC before 26.3.0CVE-2026-333875.1 Medium
- siemens simove fleetmanager v3.1, simove fleetmanager v3.2, simove fleetmanager v3.3 +5 more +7 moreA vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE...CVE-2026-673679.2 Critical
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special...CVE-2026-626547.0 High
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received...CVE-2026-626537.0 High
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware...CVE-2026-626526.9 Medium
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side...CVE-2026-626508.7 High
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does...CVE-2026-626498.7 High
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the...CVE-2026-626488.7 High
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number...CVE-2026-626479.3 Critical
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier...CVE-2026-626469.1 Critical
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is...CVE-2026-626459.3 Critical
- siemens teamcenter v2412, teamcenter v2506, teamcenter v2512 +1 more +3 moreA vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter...CVE-2026-581138.5 High
- siemens siveillance control pro v3.0, siveillance control pro v4.0, siveillance control v3.0 +1 more +3 moreA vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173)...CVE-2026-500938.9 High
- siemens desigo cc clickonce client v6, desigo cc clickonce client v7, desigo cc family v8 +5 more +7 moreA vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC...CVE-2026-342238.6 High
- siemens mendix saml (mendix 10 compatible), mendix saml (mendix 11 compatible), mendix saml (mendix 9.24 compatible) +2 moreA vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3)...CVE-2026-804658.8 High
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreDTLS Retransmits Handshake Messages From a Stale Buffer OffsetCVE-2026-84782Fix available8.2 High
- siemens element maps-ng v47, element maps-ng v48, element maps-ng v49 +2 moreA vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). The si-map component…CVE-2026-661557.0 High
- siemens kaskas: Persistent SSH Host Key Checking DisablementCVE-2026-54548Fix available3.3 Low
- python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morezipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limitsCVE-2026-15310Fix available2.1 Low
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a...CVE-2026-76957Fix available4.9 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.15, build of keycloak 26.6 +11 more +13 moreKeycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypassCVE-2026-18963Public exploitFix available9.1 Critical
- python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 more`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matchingCVE-2026-15806Fix available6.0 Medium
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreExpat Denial of Service via storeAtts() Quadratic ComplexityCVE-2026-66046Fix available8.7 High
- python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morestringprep.map_table_b2() deviates from RFC 3454 Table B.2CVE-2026-17084Fix available6.0 Medium
- siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0), simatic s7-1500 cpu 1518f-4 pn/dp mfp (6es7518-4fx00-1ab0) +2 more +4 morePerl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclassCVE-2026-19487Fix available5.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Information Disclosure Vulnerability in URL FilteringCVE-2026-03011.7 Low
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1...CVE-2026-714075.1 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0...CVE-2026-714085.0 Medium
- siemens license server (sls)A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The...CVE-2026-691098.7 High
- siemens license server (sls)A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The...CVE-2026-691088.3 High
- siemens parasolid v38.0, parasolid v38.1, simcenter femap +2 moreA vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38...CVE-2026-646297.3 High
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected...CVE-2026-597017.3 High
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected...CVE-2026-597007.3 High
- siemens desigo dxr2, desigo pxc3, desigo pxc4 +3 more +5 moreA vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo...CVE-2026-596935.3 Medium
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Nastran (All versions < V2606). The affected...CVE-2026-590867.3 High
- siemens simatic iot2050 advanced (6es7647-0ba00-1ya2), simatic iot2050 basic (6es7647-0ba00-0ya2), simatic iot2050 m.2 (6es7647-0bb00-1ya2) +1 more +3 moreA vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All...CVE-2026-58115Public exploit10.0 Critical
- siemens logo! soft comfortA vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project...CVE-2026-572637.0 High
- siemens logo! soft comfortA vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products...CVE-2026-572627.0 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...CVE-2026-500647.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...CVE-2026-500637.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...CVE-2026-500627.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...CVE-2026-500617.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...CVE-2026-500607.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...CVE-2026-500597.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...CVE-2026-500587.3 High
- python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreSuper-linear CPU usage for unbounded input to csv.Sniffer.sniff()CVE-2026-18503Fix available2.4 Low
- libexpat project libexpat, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low...CVE-2026-72522Fix available6.2 Medium
- nrwl nxNx: Zip-Slip in the self-hosted remote cacheCVE-2026-71476Fix available8.7 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreposix-cpu-timers: Prevent UAF caused by non-leader exec() raceCVE-2026-64560Public exploitFix available7.8 High
- Show moreLoading…