Patch days / September 2025

Siemens ProductCERT Patch Day — September 2025

Tuesday, 9 September 2025

Vulnerabilities: 9
Critical: 2
High: 3
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 2

Critical 9.8
CVE-2025-40795 A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 …
Critical 9.1
CVE-2025-40804 A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). The affected application exposes a network share without an…

All vulnerabilities 9

Critical2 Show

High3 Show

Medium2 Show

Low2 Show