Vendor

Siemens

1,854 known vulnerabilities.

Siemens at a glance

Last 12 months: 165
Critical · all time: 114
Exploited · all time: 1
Public exploit · all time: 6

New vulnerabilities per month · last 2412 months

Show as table

Month	Vulnerabilities	Critical
Nov 2026	6	0
Oct 2026	34	4
Sep 2026	15	2
Aug 2026	21	1
Jul 2026	7	1
Jun 2026	8	0
May 2026	20	5
Apr 2026	5	0
Mar 2026	11	1
Feb 2026	11	0
Jan 2026	3	1
Dec 2025	22	0
Nov 2025	14	0
Oct 2025	12	2
Sep 2025	9	2
Aug 2025	29	1
Jul 2025	18	1
Jun 2025	7	1
May 2025	38	5
Apr 2025	81	8
Mar 2025	25	2
Feb 2025	16	0
Jan 2025	4	0
Dec 2024	14	2

Most common weaknesses

Out-of-bounds Read 171
Out-of-bounds Write 157
Improper Neutralization of Special Elements use… 100
Heap-based Buffer Overflow 64
Stack-based Buffer Overflow 60

Products

Latest advisories

High max 9.2

NCSC-2026-0479 7 CVEs 1 exploited

Kwetsbaarheden verholpen in Siemens producten

Siemens heeft kwetsbaarheden verholpen in diverse producten zoals SIMATIC en COMOS.

Siemens

Nov 11, 2026
High max 7.5

WID-SEC-2026-4441 1 CVE rev. 2

Siemens SIMATIC: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIMATIC ausnutzen, um Sicherheitsvorkehrungen zu umgehen und beliebigen Programmcode mit Benutzerrechten auszuführen.

Siemens

Nov 10, 2026
first Nov 9, 2026
High max 8.5

WID-SEC-2026-4442 1 CVE rev. 2

Siemens SIMATIC WinCC: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIMATIC WinCC ausnutzen, um beliebigen Programmcode auszuführen.

Siemens Windows

Nov 10, 2026
first Nov 9, 2026
Critical max 9.2

WID-SEC-2026-4117 11 CVEs 1 exploited rev. 15

Node.js: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Programmcode auszuführen.

Microsoft Google Oracle IBM Apple Linux Windows

Nov 10, 2026
first Oct 21, 2026
High max 9.8

WID-SEC-2025-1869 61 CVEs rev. 128

Linux Kernel: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere nicht spezifizierte Angriffe durchzuführen.

Google Oracle IBM Red Hat Dell Linux

Nov 10, 2026
first Aug 19, 2025

All Critical High Medium Low Exploited only Public exploit

1,854 results · Feed

Medium 5.1

CVE-2026-112137

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…

Siemens Mendix Studio Pro 11.12 Mendix Studio Pro 11 ICS / OT

Nov 10, 2026
High 8.8

CVE-2026-112136

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…

Siemens Mendix Studio Pro 11.12 Mendix Studio Pro 11 ICS / OT

Nov 10, 2026
High 7.3

CVE-2026-109830

A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01). Affected devices take parts from a con…

Siemens meta-iot2050 ICS / OT

Nov 10, 2026
High 8.6

CVE-2026-109097

A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of me…

Siemens ROS# ICS / OT

Nov 10, 2026
High 8.5

CVE-2026-59082

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC Wi…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V8.0 SIMATIC WinCC V8.1 ICS / OT

Nov 10, 2026
High 7.5

CVE-2026-58114

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions…

Siemens SIMATIC WinCC V7.5 SIMATIC PCS 7 V9.1 SIMATIC WinCC V8.0 ICS / OT

Nov 10, 2026
Medium 6.8

CVE-2026-89209

A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix …

Siemens Mendix SAML (Mendix 10 compatible) Mendix SAML (Mendix 11 compatible) Mendix SAML (Mendix 9 compatible) ICS / OT

Oct 26, 2026
Medium 6.7

CVE-2026-110936 Exploited Public exploit

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application load…

Siemens Siemens Software Center ICS / OT

Oct 15, 2026
KEV Oct 20, 2026
High 7.5

CVE-2026-102076

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Compact (P2 Ethernet) APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) ICS / OT

Oct 13, 2026
High 7.5

CVE-2026-102075

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) ICS / OT

Oct 13, 2026
High 7.5

CVE-2026-102074

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Compact (P2 Ethernet) APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) ICS / OT

Oct 13, 2026
High 8.2

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

Siemens APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) APOGEE PXC Compact (P2 Ethernet) ICS / OT

Oct 13, 2026
Medium 5.3

CVE-2026-89208

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

Siemens Capital Embedded AR Classic R20-11 Capital Embedded AR Classic 431-422 Desigo PXC22-E.D ICS / OT

Oct 13, 2026
Medium 6.3

CVE-2026-89206

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 6.3

CVE-2026-89205

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 5.4

CVE-2026-89204

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 4.3

CVE-2026-89203

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 6.5

CVE-2026-89202

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 7.5

CVE-2026-89201

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 6.7

CVE-2026-89200

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 8.8

CVE-2026-89199

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 8.8

CVE-2026-89198

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 8.8

CVE-2026-89197

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
High 8.8

CVE-2026-89196

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

Siemens RUGGEDCOM CROSSBOW ICS / OT

Oct 13, 2026
Medium 5.5

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affec…

Siemens .NET Client Library for SIMATIC S7 Webserver API ICS / OT

Oct 13, 2026
High 7.5

CVE-2026-85114

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affec…

Siemens .NET Client Library for SIMATIC S7 Webserver API ICS / OT

Oct 13, 2026
High 8.3

CVE-2026-78557

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to…

Siemens Industrial Edge App Publisher Browsers ICS / OT

Oct 13, 2026
High 7.4

CVE-2026-78556

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software do…

Siemens Industrial Edge App Publisher Browsers ICS / OT

Oct 13, 2026
High 7.7

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions…

Siemens SIMATIC IPC BX-21A SIMATIC IPC RW-543A SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G ICS / OT

Oct 13, 2026
Medium 6.1

CVE-2026-63357

Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before r…

Siemens SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1515-2 PN SIMATIC Drive Controller CPU 1504D TF Windows ICS / OT

Oct 13, 2026
Medium 6.1

CVE-2026-63356

Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before includin…

Siemens SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC S7-1500 CPU 1511TF-1 PN Windows ICS / OT

Oct 13, 2026
Medium 6.1

CVE-2026-63355

Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in s…

Siemens SIMATIC S7-1500 CPU 1512C-1 PN SIMATIC S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1513F-1 PN Windows ICS / OT

Oct 13, 2026
Critical 9.6

CVE-2026-63354

Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before …

Siemens SIMATIC S7-1500 CPU 1513F-1 PN SIMATIC S7-1500 CPU 1511-1 PN SIMATIC S7-1500 CPU 1511F-1 PN Windows ICS / OT

Oct 13, 2026
Critical 9.6

CVE-2026-63353

Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the…

Siemens SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1515-2 PN SIMATIC Drive Controller CPU 1504D TF Windows ICS / OT

Oct 13, 2026
Medium 6.1

CVE-2026-63352

Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering…

Siemens SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC Drive Controller CPU 1507D TF SIMATIC S7-1500 CPU 1511TF-1 PN Windows ICS / OT

Oct 13, 2026
Medium 6.1

CVE-2026-63351

Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CS…

Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1513F-1 PN SIMATIC S7-1500 CPU 1511-1 PN Windows ICS / OT

Oct 13, 2026
Critical 9.6

CVE-2026-63350

Affected devices do not properly restrict executable content contained in imported trace files. This could allow an att…

Siemens SIMATIC Drive Controller CPU 1507D TF SIMATIC S7-1500 CPU 1511TF-1 PN SIMATIC S7-1500 CPU 1515TF-2 PN Windows ICS / OT

Oct 13, 2026
High 8.8

CVE-2026-59241

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Updat…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V8.0 SIMATIC WinCC V8.1 ICS / OT

Oct 13, 2026
Critical 9.1

CVE-2026-44415

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow a…

Siemens Industrial Edge Device Kit - x86-64 V1.18 Industrial Edge Device Kit - arm64 V1.19 Industrial Edge Device Kit - x86-64 V1.20 Browsers ICS / OT

Oct 13, 2026
Medium 6.8

CVE-2026-44414

A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, I…

Siemens Industrial Edge Device Kit - arm64 V1.21 Industrial Edge Device Kit - x86-64 V1.17 Industrial Edge Device Kit - arm64 V1.18 Browsers ICS / OT

Oct 13, 2026

Siemens

Siemens at a glance

Most common weaknesses

Products

Latest advisories

Kwetsbaarheden verholpen in Siemens producten

Siemens SIMATIC: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten

Siemens SIMATIC WinCC: Schwachstelle ermöglicht Codeausführung

Node.js: Mehrere Schwachstellen

Linux Kernel: Mehrere Schwachstellen

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…

A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01). Affected devices take parts from a con…

A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of me…

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC Wi…

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions…

A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix …

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application load…

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ve…

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic …

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfo…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restr…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valid…

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affec…

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affec…

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to…

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software do…

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions…

Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before r…

Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before includin…

Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in s…

Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before …

Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the…

Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering…

Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CS…

Affected devices do not properly restrict executable content contained in imported trace files. This could allow an att…

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Updat…

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow a…

A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, I…