{"date": "2026-10-26", "generated_at": "2026-10-26T03:05:53.488317+00:00", "headline": "Befehlsinjektionen und SSRF-Schwachstellen in Büro- und Medientools werden aktiv ausgenutzt, was eine sofortige kontinuierliche Validierung statt passivem Patching erfordert.", "summary": "Die heutige Bedrohungslandschaft wird durch die aktive Ausnutzung von OS-Befehlssprachen-Injektionen und SSRF-Schwachstellen in weit verbreiteter Software wie Collabora Online, Plex und Siemens-Tools dominiert. Da CISA neue Einträge in den Katalog der bekanntlich ausgenutzten Schwachstellen (Known Exploited Vulnerabilities) aufnimmt, ist das Risiko unbefugten Zugriffs und Datenexfiltration nicht mehr theoretisch. Das Auftreten neuer Mirai- und SalatStealer-Payloads in der Wildnis signalisiert, dass Angreifer diese Schwachstellen mit etablierten Malware-Familien kombinieren. Ihr Sicherheitsteam muss vom Annahmen von Patch-Compliance zum Nachweis der Wirksamkeit von Steuerungen durch kontinuierliche Simulation wechseln. Dieses Kurzreferat beschreibt die spezifischen Schwachstellen und die konkreten Validierungsschritte, die erforderlich sind, um sicherzustellen, dass Ihre Verteidigungen diese Angriffe tatsächlich stoppen, bevor sie zu Sicherheitsverletzungen werden.", "brief": {"headline": "Befehlsinjektionen und SSRF-Schwachstellen in Büro- und Medientools werden aktiv ausgenutzt, was eine sofortige kontinuierliche Validierung statt passivem Patching erfordert.", "summary": "Die heutige Bedrohungslandschaft wird durch die aktive Ausnutzung von OS-Befehlssprachen-Injektionen und SSRF-Schwachstellen in weit verbreiteter Software wie Collabora Online, Plex und Siemens-Tools dominiert. Da CISA neue Einträge in den Katalog der bekanntlich ausgenutzten Schwachstellen (Known Exploited Vulnerabilities) aufnimmt, ist das Risiko unbefugten Zugriffs und Datenexfiltration nicht mehr theoretisch. Das Auftreten neuer Mirai- und SalatStealer-Payloads in der Wildnis signalisiert, dass Angreifer diese Schwachstellen mit etablierten Malware-Familien kombinieren. Ihr Sicherheitsteam muss vom Annahmen von Patch-Compliance zum Nachweis der Wirksamkeit von Steuerungen durch kontinuierliche Simulation wechseln. Dieses Kurzreferat beschreibt die spezifischen Schwachstellen und die konkreten Validierungsschritte, die erforderlich sind, um sicherzustellen, dass Ihre Verteidigungen diese Angriffe tatsächlich stoppen, bevor sie zu Sicherheitsverletzungen werden.", "items": [{"cve_id": "CVE-2026-110447", "narrative": "Der in Collabora Online integrierte CODE Server leidet unter einer OS-Befehlsinjektion, die es Angreifern ermöglicht, beliebige Befehle auf dem Host-System auszuführen. Diese Schwachstelle wird aufgrund ihrer aktiven Ausnutzung in der Praxis, bestätigt durch die Aufnahme in den CISA-KEV am 2026-10-23 und einer hohen EPSS-Wahrscheinlichkeit von 12,3 %, am höchsten eingestuft. Die primäre Exposition liegt in kollaborativen Bearbeitungsumgebungen, in denen unzuverlässige Eingaben den Server erreichen könnten, was zu einer vollständigen Systemkompromittierung führt. Aus CTEM-Sicht müssen Sie kontinuierlich validieren, ob Ihre Web-Application-Firewall und Endpunkt-Kontrollen diese Injektionsversuche tatsächlich abfangen, anstatt davon auszugehen, dass der Patch ausreicht. Falls die Validierung fehlschlägt, mobilisieren Sie, indem Sie spezifische Erkennungsregeln für Anomalien bei der Befehlsausführung in Ihr SIEM einspielen und einen Verantwortlichen zur Behebung der grundlegenden Eingaben-Sanitisierung benennen. Dies stellt sicher, dass selbst wenn die Schwachstelle persistiert, die Angriffschain auf der Netzwerk- oder Endpunkt-Ebene unterbrochen wird, was Lateral Movement verhindert.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447"}, {"cve_id": "CVE-2026-106931", "narrative": "Die SiteGuard Server Edition von EG Secure Solutions ist anfällig für OS-Befehlsinjektionen, eine kritische Schwachstelle, die es Remote-Angreifern ermöglicht, beliebige Systembefehle auszuführen. Sie belegt den zweiten Platz, da sie am 2026-10-20 in den CISA-KEV-Katalog aufgenommen wurde, mit einem moderaten EPSS-Score von 2,5 %, der eine realistische Wahrscheinlichkeit der Ausnutzung anzeigt. Das Risiko ist insbesondere für Organisationen akut, die dieses Produkt für sichere Dateiübertragungen verwenden, wo eine einzelne bösartige Nutzlast Angreifern root-Level-Zugriff gewähren könnte. Kontinuierliche Validierung ist hier essenziell; Sie müssen die Injektions-Nutzlast gegen Ihre bestehenden Perimeter-Abwehrmaßnahmen simulieren, um zu beweisen, dass sie den Exploit blockieren. Falls die Simulation eine Lücke offenlegt, mobilisieren Sie, indem Sie Minderungsregeln automatisch an Ihr Web-Gateway deployen und sicherstellen, dass Endpunkt-Erkennungstools die daraus resultierende Prozessausführung flaggen. Dieser Ansatz stellt sicher, dass Ihre Sicherheitslage als wirksam bewiesen ist und nicht nur als konform angenommen wird, wodurch das Zeitfender der Exposition für diese aktiv angegriffene Schwachstelle reduziert wird.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931"}, {"cve_id": "CVE-2026-96654", "narrative": "Plex Media Server ist von einer unzureichenden Neutralisierung kodierter URI-Schemata betroffen, was zu Cross-Site-Scripting oder anderen Client-seitigen Angriffen führen kann, wenn bösartige Links verarbeitet werden. Diese Schwachstelle belegt den dritten Platz aufgrund ihrer Aufnahme in den CISA-KEV-Katalog am 2026-10-20 und einer EPSS-Wahrscheinlichkeit von 1,9 %. Die Exposition ist erheblich für jeden Benutzer, der Plex in einem Heim- oder Kleinunternehmensnetzwerk betreibt, da ein manipulierter Link den Server oder Benutzersitzungen kompromittieren könnte. Um dies zu beheben, sollte sich die kontinuierliche Validierung darauf konzentrieren, zu testen, ob Ihre Web-Steuerungen diese kodierten Schemata korrekt bereinigen, bevor sie die Anwendung erreichen. Wenn die Validierung zeigt, dass bösartige URIs durchkommen, mobilisieren Sie, indem Sie Ihre Web-Application-Firewall-Regeln aktualisieren, um bestimmte URI-Muster zu blockieren, und sicherstellen, dass Endpunkt-Schutzmaßnahmen jede nachfolgende Skriptausführung erkennen. Diese proaktive Validierung stellt sicher, dass Ihre Abwehrmaßnahmen robust gegen die spezifischen Kodierungstricks sind, die Angreifer derzeit einsetzen, anstatt sich auf statische Konfigurationen zu verlassen, die sich möglicherweise verschoben haben.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654"}, {"cve_id": "CVE-2026-96652", "narrative": "Plex Media Server weist eine Server-Side Request Forgery (SSRF)-Schwachstelle auf, die Angreifern ermöglicht, den Server dazu zu zwingen, Anfragen an unbeabsichtigte Ziele zu senden. Sie belegt den vierten Platz, da sie am 2026-10-20 in die CISA-KEV-Liste aufgenommen wurde und eine EPSS-Wahrscheinlichkeit von 1,8 % aufweist. Diese Schwachstelle ist gefährlich, da sie zur Erkundung interner Netzwerke oder zum Zugriff auf Cloud-Metadatendienste missbraucht werden kann, was potenziell zum Diebstahl von Zugangsdaten führt. Das realistische Angriffsszenario umfasst einen Angreifer, der eine manipulierte Anfrage sendet, die den Plex-Server dazu verleitet, sensible interne Ressourcen aufzurufen. Die kontinuierliche Validierung muss testen, ob Ihre Netzwerksegmentierung und Egress-Filterung tatsächlich verhindern, dass der Server auf diese internen Ziele zugreift. Wenn die Simulation zeigt, dass SSRF-Callbacks möglich sind, mobilisieren Sie, indem Sie Firewall-Regeln verschärfen, um ausgehende Anfragen des Plex-Dienstes zu blockieren, und Erkennungslogik bereitstellen, die bei ungewöhnlichen internen Verkehrsmustern alarmiert. Dies stellt sicher, dass die Netzwerksteuerungen den Schadensradius effektiv begrenzen, selbst wenn die Anwendungsschwachstelle besteht.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652"}, {"cve_id": "CVE-2026-96656", "narrative": "Plex Media Server ist anfällig für die externe Kontrolle von Dateinamen oder Pfaden, was Angreifern ermöglichen kann, Dateien an beliebigen Stellen im System zu schreiben. Dies belegt den fünften Platz aufgrund ihres KEV-Status, der am 2026-10-20 hinzugefügt wurde, und einer EPSS-Wahrscheinlichkeit von 1,8 %. Das Risiko ist hoch für jede Bereitstellung, bei der der Server Schreibberechtigungen für sensible Verzeichnisse hat, da dies zu Remote Code Execution oder Datenmanipulation führen könnte. Angreifer könnten dies ausnutzen, indem sie Dateiupload-Parameter manipulieren, um bösartige Skripte in webzugängliche Verzeichnisse zu legen. Die kontinuierliche Validierung sollte diese Dateipfad-Manipulation simulieren, um zu überprüfen, ob Ihre Dateiintegritätsüberwachung und Zugriffssteuerungen unautorisierte Schreibvorgänge verhindern. Wenn die Validierung fehlschlägt, mobilisieren Sie, indem Sie die Dateisystemberechtigungen des Plex-Dienstkontos einschränken und Erkennungsregeln bereitstellen, die bei unerwarteter Dateierstellung in kritischen Verzeichnissen alarmieren. Dieser Ansatz stellt sicher, dass Ihre Steuerungen aktiv gegen die spezifischen Dateimanipulationstechniken getestet werden, die in der Praxis eingesetzt werden, und bietet eine zuverlässige Abwehrebene.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656"}, {"cve_id": "CVE-2026-96655", "narrative": "Eine weitere Server-Side Request Forgery (SSRF)-Schwachstelle in Plex Media Server ermöglicht es Angreifern, vorgesehene Zugriffssteuerungen zu umgehen und mit internen Diensten zu interagieren. Sie belegt den sechsten Platz, da sie am 2026-10-20 in den KEV-Katalog der CISA aufgenommen wurde, mit einem EPSS-Wert von 1,6 %. Dieser Fehler ist insbesondere in cloudbasierten Umgebungen besorgniserregend, da SSRF genutzt werden kann, um temporäre Zugangsdaten von Metadaten-Endpunkten zu stehlen. Das Angriffsszenario umfasst einen Angreifer, der eine Anfrage erstellt, die den Plex-Server dazu veranlasst, sensible Daten von einer internen IP-Adresse abzurufen. Die kontinuierliche Validierung muss testen, ob Ihre Netzwerkrichtlinien den Plex-Server wirksam daran hindern, auf diese internen Metadatendienste zuzugreifen. Zeigt die Simulation, dass die Anfrage erfolgreich ist, mobilisieren Sie sich, indem Sie strenge Egress-Filterung implementieren und Erkennungslogik bereitstellen, um ungewöhnliche interne Anfragen, die vom Plex-Dienst ausgehen, zu überwachen. Dies stellt sicher, dass Ihre Netzwerksteuerungen nachweislich SSRF-Angriffe stoppen, anstatt sich auf die interne Verarbeitung von Anfragen durch die Anwendung zu verlassen.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655"}, {"cve_id": "CVE-2026-114625", "narrative": "Arista VeloCloud Orchestrator ist anfällig für SQL-Injection, was es Angreifern ermöglichen kann, Datenbankabfragen zu manipulieren und potenziell unbefugten Zugriff auf sensible Daten zu erlangen. Dies belegt den siebten Platz aufgrund seiner Aufnahme in den KEV der CISA am 2026-10-23, mit einer EPSS-Wahrscheinlichkeit von 1,0 %. Die Exposition ist erheblich für Netzwerkbetreiber, die VeloCloud nutzen, da eine erfolgreiche Injection die Integrität der Netzwerkkonfigurationsdaten kompromittieren könnte. Angreifer könnten dies ausnutzen, indem sie bösartige SQL-Befehle über Eingabefelder in der Web-Oberfläche des Orchestrators injizieren. Die kontinuierliche Validierung sollte testen, ob Ihre Datenbank-Firewall und anwendungsseitigen Kontrollen diese Injektionsversuche wirksam neutralisieren. Zeigt die Validierung, dass bösartige Abfragen ausgeführt werden, mobilisieren Sie sich, indem Sie die Durchsetzung parametrisierter Abfragen bereitstellen und Ihr SIEM aktualisieren, um SQL-Injection-Muster in Datenbankprotokollen zu erkennen. Dies stellt sicher, dass Ihre Abwehrmaßnahmen aktiv gegen die spezifisch verwendeten SQL-Injection-Techniken validiert werden und so eine robuste Schutzschicht für Ihre Netzwerkinfrastruktur bieten.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625"}, {"cve_id": "CVE-2026-110936", "narrative": "Das Siemens Software Center ist von einer Uncontrolled Search Path Element-Schwachstelle betroffen, die es Angreifern ermöglichen kann, beliebigen Code auszuführen, indem sie bösartige Dateien im Suchpfad der Anwendung ablegen. Es belegt den achten Platz, da es am 2026-10-20 in den CISA KEV aufgenommen wurde, mit einem EPSS-Score von 1,0 %. Diese Schwachstelle ist in industriellen Umgebungen, in denen Siemens-Software zur Verwaltung kritischer Assets verwendet wird, besonders gefährlich, da sie zu einer vollständigen Systemkompromittierung führen kann. Das Angriffsszenario umfasst das Ablegen einer bösartigen DLL oder ausführbaren Datei durch einen Angreifer in einem Verzeichnis, das das Software Center nach Bibliotheken durchsucht. Die kontinuierliche Validierung muss testen, ob Ihre Endpunkt-Steuerungen und die Überwachung der Dateintegrität die Ausführung dieser unzuverlässigen Binärdateien verhindern. Wenn die Simulation zeigt, dass die bösartige Datei ausgeführt wird, müssen Sie durch die Einschränkung des Suchpfads auf vertrauenswürdige Verzeichnisse und den Einsatz von Erkennungsregeln, die bei unerwarteter Prozesserstellung durch das Software Center alarmieren, gegensteuern. Dies stellt sicher, dass Ihre Steuerungen nachweislich in der Lage sind, diese spezifische Art der Codeausführung zu stoppen und Ihre industriellen Vorgänge vor potenziellen Störungen zu schützen.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936"}]}, "editorial": {"headline": "Hören Sie auf zu raten, ob Ihre Steuerungen funktionieren; beginnen Sie damit, nachzuweisen, dass sie nicht versagen.", "editorial": "Let’s be honest: the threat landscape isn’t just noisy; it’s actively hostile. Today’s ranked findings tell a clear story. We have eight vulnerabilities under active exploitation, all sitting in the CISA KEV catalog. The headline grabber is CVE-2026-110447, an OS command injection in Collabora Online with a 12% EPSS score. That’s not a theoretical risk; it’s a live fire drill. But don’t just look at the top item. The cluster of Plex Media Server flaws (CVE-2026-96654, -96652, -96656, -96655) and the Arista VeloCloud SQL injection (CVE-2026-114625) show that attackers are diversifying their entry points. They are hitting web interfaces, internal orchestrators, and media servers simultaneously. \n\nHere is the view: if you are relying on patching alone, you are already behind. The real question isn't \"have we patched this?\" It is \"does our detection stack actually catch this specific exploit pattern?\" We have new IOCs for Mirai and SalatStealer payloads, plus specific IOBs for SSRF callbacks and SQL injection. These are not just data points; they are test cases. \n\nYour CTEM programme must shift from passive monitoring to active validation. You need to simulate these exact exploits against your production controls. If your WAF lets a crafted URI scheme through, or if your EDR misses a command injection payload, you have a gap. Don't assume your controls are robust; prove it. If the simulation fails, mobilise immediately. Push the specific detection rules to your SIEM, assign an owner to the remediation, and capture the evidence for your next audit. It’s not about having the best tools; it’s about knowing, with certainty, that they work when the bad guys are already inside the door.", "ctem": {"continuous_validation": "Simulate the specific exploit payloads for CVE-2026-110447 and the Plex SSRF vulnerabilities against your current endpoint and web defences. Validate whether your controls detect the associated IOCs for Mirai and SalatStealer, as well as the behavioural indicators for SQL injection and command injection.", "mobilisation": "For any validation failure, automatically push updated detection rules to your SIEM and EDR platforms. Assign remediation owners to patch the affected systems and generate framework-mapped evidence to demonstrate compliance and closure."}}, "top10": [{"cve_id": "CVE-2026-110447", "name": "Collabora Online – Eingebaute CODE Server OS-Befehlsinjektion-Schwachstelle", "vendor": "Collabora", "product": "Collabora Online – Built-in CODE Server", "kev": true, "kev_date_added": "2026-10-23", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447", "epss": 0.12328, "priority_rank": 1, "priority_reason": "exploited in the wild (KEV, added 2026-10-23); EPSS 12%", "recently_covered": true, "cwe": ["CWE-78"], "narrative": "Der in Collabora Online integrierte CODE Server leidet unter einer OS-Befehlsinjektion, die es Angreifern ermöglicht, beliebige Befehle auf dem Host-System auszuführen. Diese Schwachstelle wird aufgrund ihrer aktiven Ausnutzung in der Praxis, bestätigt durch die Aufnahme in den CISA-KEV am 2026-10-23 und einer hohen EPSS-Wahrscheinlichkeit von 12,3 %, am höchsten eingestuft. Die primäre Exposition liegt in kollaborativen Bearbeitungsumgebungen, in denen unzuverlässige Eingaben den Server erreichen könnten, was zu einer vollständigen Systemkompromittierung führt. Aus CTEM-Sicht müssen Sie kontinuierlich validieren, ob Ihre Web-Application-Firewall und Endpunkt-Kontrollen diese Injektionsversuche tatsächlich abfangen, anstatt davon auszugehen, dass der Patch ausreicht. Falls die Validierung fehlschlägt, mobilisieren Sie, indem Sie spezifische Erkennungsregeln für Anomalien bei der Befehlsausführung in Ihr SIEM einspielen und einen Verantwortlichen zur Behebung der grundlegenden Eingaben-Sanitisierung benennen. Dies stellt sicher, dass selbst wenn die Schwachstelle persistiert, die Angriffschain auf der Netzwerk- oder Endpunkt-Ebene unterbrochen wird, was Lateral Movement verhindert."}, {"cve_id": "CVE-2026-106931", "name": "EG Secure Solutions SiteGuard Server Edition OS-Befehlsinjektions-Schwachstelle", "vendor": "EG Secure Solutions", "product": "SiteGuard Server Edition", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931", "epss": 0.02528, "priority_rank": 2, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 3%", "recently_covered": true, "cwe": ["CWE-78"], "narrative": "Die SiteGuard Server Edition von EG Secure Solutions ist anfällig für OS-Befehlsinjektionen, eine kritische Schwachstelle, die es Remote-Angreifern ermöglicht, beliebige Systembefehle auszuführen. Sie belegt den zweiten Platz, da sie am 2026-10-20 in den CISA-KEV-Katalog aufgenommen wurde, mit einem moderaten EPSS-Score von 2,5 %, der eine realistische Wahrscheinlichkeit der Ausnutzung anzeigt. Das Risiko ist insbesondere für Organisationen akut, die dieses Produkt für sichere Dateiübertragungen verwenden, wo eine einzelne bösartige Nutzlast Angreifern root-Level-Zugriff gewähren könnte. Kontinuierliche Validierung ist hier essenziell; Sie müssen die Injektions-Nutzlast gegen Ihre bestehenden Perimeter-Abwehrmaßnahmen simulieren, um zu beweisen, dass sie den Exploit blockieren. Falls die Simulation eine Lücke offenlegt, mobilisieren Sie, indem Sie Minderungsregeln automatisch an Ihr Web-Gateway deployen und sicherstellen, dass Endpunkt-Erkennungstools die daraus resultierende Prozessausführung flaggen. Dieser Ansatz stellt sicher, dass Ihre Sicherheitslage als wirksam bewiesen ist und nicht nur als konform angenommen wird, wodurch das Zeitfender der Exposition für diese aktiv angegriffene Schwachstelle reduziert wird."}, {"cve_id": "CVE-2026-96654", "name": "Plex Media Server: Unzureichende Neutralisierung kodierter URI-Schemata in einer Webpage – Schwachstelle", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654", "epss": 0.01949, "priority_rank": 3, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-84"], "narrative": "Plex Media Server ist von einer unzureichenden Neutralisierung kodierter URI-Schemata betroffen, was zu Cross-Site-Scripting oder anderen Client-seitigen Angriffen führen kann, wenn bösartige Links verarbeitet werden. Diese Schwachstelle belegt den dritten Platz aufgrund ihrer Aufnahme in den CISA-KEV-Katalog am 2026-10-20 und einer EPSS-Wahrscheinlichkeit von 1,9 %. Die Exposition ist erheblich für jeden Benutzer, der Plex in einem Heim- oder Kleinunternehmensnetzwerk betreibt, da ein manipulierter Link den Server oder Benutzersitzungen kompromittieren könnte. Um dies zu beheben, sollte sich die kontinuierliche Validierung darauf konzentrieren, zu testen, ob Ihre Web-Steuerungen diese kodierten Schemata korrekt bereinigen, bevor sie die Anwendung erreichen. Wenn die Validierung zeigt, dass bösartige URIs durchkommen, mobilisieren Sie, indem Sie Ihre Web-Application-Firewall-Regeln aktualisieren, um bestimmte URI-Muster zu blockieren, und sicherstellen, dass Endpunkt-Schutzmaßnahmen jede nachfolgende Skriptausführung erkennen. Diese proaktive Validierung stellt sicher, dass Ihre Abwehrmaßnahmen robust gegen die spezifischen Kodierungstricks sind, die Angreifer derzeit einsetzen, anstatt sich auf statische Konfigurationen zu verlassen, die sich möglicherweise verschoben haben."}, {"cve_id": "CVE-2026-96652", "name": "Plex Media Server: Server-Side Request Forgery (SSRF) – Schwachstelle", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652", "epss": 0.01821, "priority_rank": 4, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-918"], "narrative": "Plex Media Server weist eine Server-Side Request Forgery (SSRF)-Schwachstelle auf, die Angreifern ermöglicht, den Server dazu zu zwingen, Anfragen an unbeabsichtigte Ziele zu senden. Sie belegt den vierten Platz, da sie am 2026-10-20 in die CISA-KEV-Liste aufgenommen wurde und eine EPSS-Wahrscheinlichkeit von 1,8 % aufweist. Diese Schwachstelle ist gefährlich, da sie zur Erkundung interner Netzwerke oder zum Zugriff auf Cloud-Metadatendienste missbraucht werden kann, was potenziell zum Diebstahl von Zugangsdaten führt. Das realistische Angriffsszenario umfasst einen Angreifer, der eine manipulierte Anfrage sendet, die den Plex-Server dazu verleitet, sensible interne Ressourcen aufzurufen. Die kontinuierliche Validierung muss testen, ob Ihre Netzwerksegmentierung und Egress-Filterung tatsächlich verhindern, dass der Server auf diese internen Ziele zugreift. Wenn die Simulation zeigt, dass SSRF-Callbacks möglich sind, mobilisieren Sie, indem Sie Firewall-Regeln verschärfen, um ausgehende Anfragen des Plex-Dienstes zu blockieren, und Erkennungslogik bereitstellen, die bei ungewöhnlichen internen Verkehrsmustern alarmiert. Dies stellt sicher, dass die Netzwerksteuerungen den Schadensradius effektiv begrenzen, selbst wenn die Anwendungsschwachstelle besteht."}, {"cve_id": "CVE-2026-96656", "name": "Plex Media Server: Externe Kontrolle von Dateinamen oder Pfaden – Schwachstelle", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656", "epss": 0.01785, "priority_rank": 5, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-73"], "narrative": "Plex Media Server ist anfällig für die externe Kontrolle von Dateinamen oder Pfaden, was Angreifern ermöglichen kann, Dateien an beliebigen Stellen im System zu schreiben. Dies belegt den fünften Platz aufgrund ihres KEV-Status, der am 2026-10-20 hinzugefügt wurde, und einer EPSS-Wahrscheinlichkeit von 1,8 %. Das Risiko ist hoch für jede Bereitstellung, bei der der Server Schreibberechtigungen für sensible Verzeichnisse hat, da dies zu Remote Code Execution oder Datenmanipulation führen könnte. Angreifer könnten dies ausnutzen, indem sie Dateiupload-Parameter manipulieren, um bösartige Skripte in webzugängliche Verzeichnisse zu legen. Die kontinuierliche Validierung sollte diese Dateipfad-Manipulation simulieren, um zu überprüfen, ob Ihre Dateiintegritätsüberwachung und Zugriffssteuerungen unautorisierte Schreibvorgänge verhindern. Wenn die Validierung fehlschlägt, mobilisieren Sie, indem Sie die Dateisystemberechtigungen des Plex-Dienstkontos einschränken und Erkennungsregeln bereitstellen, die bei unerwarteter Dateierstellung in kritischen Verzeichnissen alarmieren. Dieser Ansatz stellt sicher, dass Ihre Steuerungen aktiv gegen die spezifischen Dateimanipulationstechniken getestet werden, die in der Praxis eingesetzt werden, und bietet eine zuverlässige Abwehrebene."}, {"cve_id": "CVE-2026-96655", "name": "Plex Media Server: Server-Side Request Forgery (SSRF) – Schwachstelle", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655", "epss": 0.01637, "priority_rank": 6, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-918"], "narrative": "Eine weitere Server-Side Request Forgery (SSRF)-Schwachstelle in Plex Media Server ermöglicht es Angreifern, vorgesehene Zugriffssteuerungen zu umgehen und mit internen Diensten zu interagieren. Sie belegt den sechsten Platz, da sie am 2026-10-20 in den KEV-Katalog der CISA aufgenommen wurde, mit einem EPSS-Wert von 1,6 %. Dieser Fehler ist insbesondere in cloudbasierten Umgebungen besorgniserregend, da SSRF genutzt werden kann, um temporäre Zugangsdaten von Metadaten-Endpunkten zu stehlen. Das Angriffsszenario umfasst einen Angreifer, der eine Anfrage erstellt, die den Plex-Server dazu veranlasst, sensible Daten von einer internen IP-Adresse abzurufen. Die kontinuierliche Validierung muss testen, ob Ihre Netzwerkrichtlinien den Plex-Server wirksam daran hindern, auf diese internen Metadatendienste zuzugreifen. Zeigt die Simulation, dass die Anfrage erfolgreich ist, mobilisieren Sie sich, indem Sie strenge Egress-Filterung implementieren und Erkennungslogik bereitstellen, um ungewöhnliche interne Anfragen, die vom Plex-Dienst ausgehen, zu überwachen. Dies stellt sicher, dass Ihre Netzwerksteuerungen nachweislich SSRF-Angriffe stoppen, anstatt sich auf die interne Verarbeitung von Anfragen durch die Anwendung zu verlassen."}, {"cve_id": "CVE-2026-114625", "name": "SQL-Injection-Schwachstelle in Arista VeloCloud Orchestrator", "vendor": "Arista", "product": "VeloCloud Orchestrator", "kev": true, "kev_date_added": "2026-10-23", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625", "epss": 0.01025, "priority_rank": 7, "priority_reason": "exploited in the wild (KEV, added 2026-10-23); EPSS 1%", "recently_covered": true, "cwe": ["CWE-89"], "narrative": "Arista VeloCloud Orchestrator ist anfällig für SQL-Injection, was es Angreifern ermöglichen kann, Datenbankabfragen zu manipulieren und potenziell unbefugten Zugriff auf sensible Daten zu erlangen. Dies belegt den siebten Platz aufgrund seiner Aufnahme in den KEV der CISA am 2026-10-23, mit einer EPSS-Wahrscheinlichkeit von 1,0 %. Die Exposition ist erheblich für Netzwerkbetreiber, die VeloCloud nutzen, da eine erfolgreiche Injection die Integrität der Netzwerkkonfigurationsdaten kompromittieren könnte. Angreifer könnten dies ausnutzen, indem sie bösartige SQL-Befehle über Eingabefelder in der Web-Oberfläche des Orchestrators injizieren. Die kontinuierliche Validierung sollte testen, ob Ihre Datenbank-Firewall und anwendungsseitigen Kontrollen diese Injektionsversuche wirksam neutralisieren. Zeigt die Validierung, dass bösartige Abfragen ausgeführt werden, mobilisieren Sie sich, indem Sie die Durchsetzung parametrisierter Abfragen bereitstellen und Ihr SIEM aktualisieren, um SQL-Injection-Muster in Datenbankprotokollen zu erkennen. Dies stellt sicher, dass Ihre Abwehrmaßnahmen aktiv gegen die spezifisch verwendeten SQL-Injection-Techniken validiert werden und so eine robuste Schutzschicht für Ihre Netzwerkinfrastruktur bieten."}, {"cve_id": "CVE-2026-110936", "name": "Siemens Software Center Uncontrolled Search Path Element Schwachstelle", "vendor": "Siemens", "product": "Software Center", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936", "epss": 0.00967, "priority_rank": 8, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 1%", "recently_covered": true, "cwe": ["CWE-427"], "narrative": "Das Siemens Software Center ist von einer Uncontrolled Search Path Element-Schwachstelle betroffen, die es Angreifern ermöglichen kann, beliebigen Code auszuführen, indem sie bösartige Dateien im Suchpfad der Anwendung ablegen. Es belegt den achten Platz, da es am 2026-10-20 in den CISA KEV aufgenommen wurde, mit einem EPSS-Score von 1,0 %. Diese Schwachstelle ist in industriellen Umgebungen, in denen Siemens-Software zur Verwaltung kritischer Assets verwendet wird, besonders gefährlich, da sie zu einer vollständigen Systemkompromittierung führen kann. Das Angriffsszenario umfasst das Ablegen einer bösartigen DLL oder ausführbaren Datei durch einen Angreifer in einem Verzeichnis, das das Software Center nach Bibliotheken durchsucht. Die kontinuierliche Validierung muss testen, ob Ihre Endpunkt-Steuerungen und die Überwachung der Dateintegrität die Ausführung dieser unzuverlässigen Binärdateien verhindern. Wenn die Simulation zeigt, dass die bösartige Datei ausgeführt wird, müssen Sie durch die Einschränkung des Suchpfads auf vertrauenswürdige Verzeichnisse und den Einsatz von Erkennungsregeln, die bei unerwarteter Prozesserstellung durch das Software Center alarmieren, gegensteuern. Dies stellt sicher, dass Ihre Steuerungen nachweislich in der Lage sind, diese spezifische Art der Codeausführung zu stoppen und Ihre industriellen Vorgänge vor potenziellen Störungen zu schützen."}], "advisories": [{"source": "CISA (US)", "title": "CISA fügt eine bekannte ausgenutzte Schwachstelle dem Katalog hinzu", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog-0", "published": "Fri, 23 Oct 26 12:00:00 +0000", "summary": "<p>CISA hat eine neue Schwachstelle in den&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a> aufgenommen, basierend auf Beweisen für aktive Ausnutzung.</p>\n<ul type="disc">\n<li><a class="Hyperlink SCXW162250516 BCX8" href="https://www.cve.org/CVERecord?id=CVE-2026-110447" target="_blank" rel="noreferrer noopener"><u>CVE-2026-110447</u></a> Collabora Online – Built-in CODE Server OS Command Injection Vulnerability&nbsp;</li>\n</ul>\n<p>Diese Art von Schwachstelle ist ein häufiger Angriffsvektor für bösartige Cyber-Akteure und birgt erhebliche Risiken für den föderalen Bereich.</p>\n<p><a href="https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk">Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk</a> legt Anforderungen an das Schwachstellenmanagement für Agenturen der Federal Civilian Executive Branch (FCEB) fest. BOD 26-04 unterstreicht die Bedeutung des KEV-Catalogs und verlangt von föderalen Agenturen, die schnelle Behebung von Hochrisiko-Schwachstellen zu priorisieren, insbesondere jener, die durch Common Vulnerabilities and Exposures (CVEs) im KEV-Catalog von CISA auf öffentlich zugänglichen Assets identifiziert wurden und nach der Ausnutzung die vollständige Kontrolle über das Asset gewähren, während Maßnahmen für Schwachstellen mit geringerem Risiko aufgeschoben werden. BOD 26-04 legt zudem grundlegende Erwartungen fest, wann Agenturen prüfen müssen, ob Bedrohungsakteure das System vor der Anwendung des Patches kompromittiert haben.</p>\n<p>Obwohl BOD 26-04 nur für FCEB-Agenturen gilt, ermutigt CISA alle Organisationen, ein risikobasiertes Schwachstellenmanagement zu übernehmen und die Behebung von&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">KEV-Catalog-Schwachstellen</a> zu priorisieren. CISA wird weiterhin Schwachstellen in den Katalog aufnehmen, die die&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities">festgelegten Kriterien</a> erfüllen.</p>\n<p>Ist Ihnen eine ausgenutzte Schwachstelle bekannt, die derzeit nicht im KEV-Catalog aufgeführt ist? Reichen Sie diese zur möglichen Aufnahme über das&nbsp;<a href="https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w" target="_blank">KEV Nomination Form</a> von CISA ein. Mögliche KEV-Zusätze müssen eine CVE-ID, Beweise für die Ausnutzung und klare Milderungsanweisungen aufweisen.</p>"}, {"source": "CISA (US)", "title": "CISA fügt eine bekannte ausgenutzte Schwachstelle dem Katalog hinzu", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog", "published": "Fri, 23 Oct 26 12:00:00 +0000", "summary": "<p>CISA hat eine neue Schwachstelle in seinen&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a> aufgenommen, basierend auf Beweisen für aktive Ausnutzung.</p>\n<ul type="disc">\n<li><a href="https://www.cve.org/CVERecord?id=CVE-2026-114625" target="_blank">CVE-2026-114625</a> Arista VeloCloud Orchestrator SQL Injection Vulnerability</li>\n</ul>\n<p>Dieser Schwachstellentyp ist ein häufiger Angriffsvektor für bösartige Cyber-Akteure und birgt erhebliche Risiken für den föderalen Bereich.</p>\n<p><a href="https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk">Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk</a> legt Schwachstellenmanagement-Anforderungen für Agenturen des Federal Civilian Executive Branch (FCEB) fest. BOD 26-04 unterstreicht die Bedeutung des KEV-Catalogs und verlangt von föderalen Agenturen, die schnelle Behebung von Hochrisiko-Schwachstellen zu priorisieren, insbesondere jener, die durch Common Vulnerabilities and Exposures (CVEs) im KEV-Catalog von CISA auf öffentlich exponierten Assets identifiziert werden und nach der Ausnutzung die vollständige Kontrolle über das Asset gewähren, während Maßnahmen für Schwachstellen mit geringerem Risiko aufgeschoben werden. BOD 26-04 legt zudem grundlegende Erwartungen fest, wann Agenturen prüfen müssen, ob Bedrohungsakteure das System vor der Anwendung des Patches kompromittiert haben.</p>\n<p>Obwohl BOD 26-04 nur für FCEB-Agenturen gilt, ermutigt CISA alle Organisationen, ein risikobasiertes Schwachstellenmanagement zu übernehmen und die Behebung von&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">KEV-Catalog-Schwachstellen</a> zu priorisieren. CISA wird weiterhin Schwachstellen in den Katalog aufnehmen, die die&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities">festgelegten Kriterien</a> erfüllen.</p>\n<p>Sie kennen eine ausgenutzte Schwachstelle, die derzeit nicht im KEV-Catalog aufgeführt ist? Reichen Sie diese über das CISA&nbsp;<a href="https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w" target="_blank">KEV Nomination Form</a> zur möglichen Aufnahme ein. Mögliche KEV-Zusätze müssen eine CVE-ID, Beweise für die Ausnutzung und klare Migrationsleitlinien aufweisen.</p>"}, {"source": "CISA (US)", "title": "Siemens SIMATIC S7 Webserver API", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-10.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens SIMATIC S7 Webserver API are affected:</p>\n<ul>\n<li>.NET Client Library for SIMATIC S7 Webserver API vers:intdot/&lt;3.3.61, vers:intdot/&lt;3.3.62 (CVE-2026-85114, CVE-2026-85115)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7.5</td>\n<td>Siemens</td>\n<td>.NET Client Library for SIMATIC S7 Webserver API</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">2 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Generation of Error Message Containing Sensitive Information</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-85114</div>\n<div class="c-expandable-textbox__body">Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.61</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.3.61 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/22.html">CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-85114">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-85115</div>\n<div class="c-expandable-textbox__body">Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.61</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.62</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.3.62 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/209.html">CWE-209 Generation of Error Message Containing Sensitive Information</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.5</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-85115">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-390352 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-390352 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens APOGEE, TALON und Desigo PXC/PXM Produkte", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-08.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens APOGEE, TALON and Desigo PXC/PXM Products are affected:</p>\n<ul>\n<li>APOGEE MBC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MBC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MEC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MEC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Compact (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Compact (P2 Ethernet) vers:intdot/&lt;2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Modular (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Modular (P2 Ethernet) vers:intdot/&lt;2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>Desigo PXC00-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC00-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC001-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC100-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC12-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC128-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC200-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC22-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC22.1-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC36.1-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC50-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC64-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXM20-E vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>TALON TC Compact (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>TALON TC Modular (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.2</td>\n<td>Siemens</td>\n<td>APOGEE MBC (PPC) (BACnet)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">3 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Read, Integer Underflow (Wrap or Wraparound), Stack-based Buffer Overflow</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89208</div>\n<div class="c-expandable-textbox__body">The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>13 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89208">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102073</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>23 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/191.html">CWE-191 Integer Underflow (Wrap or Wraparound)</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.2</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102073">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102074</div>\n<div class="c-expandable-textbox__body">The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>33 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102074">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102075</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>43 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102075">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102076</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>53 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102076">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-333035 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-333035 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens RUGGEDCOM CROSSBOW", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-12.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM CROSSBOW are affected:</p>\n<ul>\n<li>RUGGEDCOM CROSSBOW vers:intdot/&lt;6.0 (CVE-2026-89196, CVE-2026-89197, CVE-2026-89198, CVE-2026-89199, CVE-2026-89200, CVE-2026-89201, CVE-2026-89202, CVE-2026-89203, CVE-2026-89204, CVE-2026-89205, CVE-2026-89206)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.8</td>\n<td>Siemens</td>\n<td>RUGGEDCOM CROSSBOW</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Authorization Bypass Through User-Controlled Key, Insertion of Sensitive Information Into Sent Data, Client-Side Enforcement of Server-Side Security</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89196</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89196">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89197</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89197">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89198</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89198">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89199</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89199">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89200</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.7</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89200">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89201</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>6 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89201">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89202</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>7 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.5</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89202">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89203</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>8 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/201.html">CWE-201 Insertion of Sensitive Information Into Sent Data</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>4.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89203">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89204</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>9 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.4</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89204">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89205</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>10 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/602.html">CWE-602 Client-Side Enforcement of Server-Side Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89205">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89206</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>11 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/602.html">CWE-602 Client-Side Enforcement of Server-Side Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89206">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-508506 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-508506 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens RUGGEDCOM APE1808 Geräte", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-18.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM APE1808 Devices are affected:</p>\n<ul>\n<li>RUGGEDCOM APE1808 vers:all/* (CVE-2026-33387, CVE-2026-33388, CVE-2026-33389, CVE-2026-33391, CVE-2026-33920)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7.5</td>\n<td>Siemens</td>\n<td>RUGGEDCOM APE1808</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Neutralization of Special Elements Used in a Template Engine, Incorrect Authorization, Lack of Administrator Control over Security, Cross-Site Request Forgery (CSRF)</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33387</div>\n<div class="c-expandable-textbox__body">A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a malicious dashboard. When the victim views or imports the dashboard, the payload executes in their browser context, allowing the attacker to modify application data or disrupt application availability.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/1336.html">CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>4.6</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33387">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33388</div>\n<div class="c-expandable-textbox__body">An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who deletes or edits an entry can disrupt authentication for dependent devices, and one who manipulates an entry's configuration may be able to indirectly obtain the credentials.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/863.html">CWE-863 Incorrect Authorization</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.4</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33388">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33389</div>\n<div class="c-expandable-textbox__body">An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned between a sensor and a polled device can, during a polling session, impersonate the device and intercept the communication, including the credentials used to access it. The captured credentials can then be replayed to authenticate against the device itself or against other devices sharing the same credentials, allowing the attacker to access and tamper with the device's data and to disrupt its operations.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/671.html">CWE-671 Lack of Administrator Control over Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33389">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33391</div>\n<div class="c-expandable-textbox__body">An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart Polling discovery configuration. This allows the attacker to disrupt the visibility of assets in the monitored network.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/863.html">CWE-863 Incorrect Authorization</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.4</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33391">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33920</div>\n<div class="c-expandable-textbox__body">A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performed by the victim in this state is attributed to the attacker's account, compromising the integrity of the audit trail.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/352.html">CWE-352 Cross-Site Request Forgery (CSRF)</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>3.5</td>\n<td>LOW</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33920">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-911336 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-911336 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Industrial Edge App Publisher", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-02.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on the local machine through Node.js integration. Siemens has released an update for the Industrial Edge App Publisher and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens Industrial Edge App Publisher are affected:</p>\n<ul>\n<li>Industrial Edge App Publisher vers:intdot/&lt;1.27.9 (CVE-2026-78556, CVE-2026-78557)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.3</td>\n<td>Siemens</td>\n<td>Industrial Edge App Publisher</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">2 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Certificate Validation, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-78556</div>\n<div class="c-expandable-textbox__body">The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended server.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/295.html">CWE-295 Improper Certificate Validation</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.4</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-78556">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-78557</div>\n<div class="c-expandable-textbox__body">The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/79.html">CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.3</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-78557">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-968435 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-968435 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-11_test.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP are affected:</p>\n<ul>\n<li>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/&gt;=3.1.7</li>\n<li>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 10</td>\n<td>Siemens</td>\n<td>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">428 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Access of Resource Using Incompatible Type ('Type Confusion'), Access of Uninitialized Pointer, Active Debug Code, Buffer Access with Incorrect Length Value, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Buffer Underwrite ('Buffer Underflow'), Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), Deadlock, Divide By Zero, Expired Pointer Dereference, Exposure of Sensitive Information Due to Incompatible Policies, Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution, Improper Enforcement of Behavioral Workflow, Improper Following of Specification by Caller, Improper Handling of Invalid Use of Special Elements, Improper Handling of Length Parameter Inconsistency, Improper Handling of Missing Special Element, Improper Handling of Structural Elements, Improper Input Validation, Improper Locking, Improper Neutralization of Null Byte or NUL Character, Improper Null Termination, Improper Privilege Management, Improper Resource Locking, Improper Resource Shutdown or Release, Improper Update of Reference Count, Improper Validation of Specified Index, Position, or Offset in Input, Improper Validation of Specified Quantity in Input, Improper Validation of Specified Type of Input, Improperly Implemented Security Check for Standard, Incomplete Cleanup, Incomplete Internal State Distinction, Incorrect Calculation of Buffer Size, Incorrect Conversion between Numeric Types, Incorrect Privilege Assignment, Incorrect Synchronization, Incorrect Type Conversion or Cast, Integer Overflow or Wraparound, Loop with Unreachable Exit Condition ('Infinite Loop'), Memory Allocation with Excessive Size Value, Misinterpretation of Input, Missing Critical Step in Authentication, Missing Default Case in Multiple Condition Expression, Missing Encryption of Sensitive Data, Missing Initialization of Resource, Missing Release of Memory after Effective Lifetime, Missing Release of Resource after Effective Lifetime, Missing Report of Error Condition, Missing Synchronization, Multiple Releases of Same Resource or Handle, NULL Pointer Dereference, Operation on a Resource after Expiration or Release, Out-of-bounds Read, Out-of-bounds Write, Plaintext Storage of a Password, Race Condition within a Thread, Reachable Assertion, Release of Invalid Pointer or Reference, Signal Handler Race Condition, Time-of-check Time-of-use (TOCTOU) Race Condition, Transmission of Private Resources into a New Sphere ('Resource Leak'), Trust of System Event Data, Unchecked Return Value, Uncontrolled Recursion, Untrusted Pointer Dereference, Use After Free, Use of Externally-Controlled Format String, Use of Uninitialized Resource, Use of Uninitialized Variable, Write-what-where Condition</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2021-41617</div>\n<div class="c-expandable-textbox__body">sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/311.html">CWE-311 Missing Encryption of Sensitive Data</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2021-41617">View CVE Details</a></p>\n</div>\n</div>\n<ul type="disc">\n<li>CVE-2021-41617</li>\n<li>CVE-2023-28531</li>\n<li>CVE-2023-51384</li>\n<li>CVE-2023-52927</li>\n<li>CVE-2023-53292</li>\n<li>CVE-2024-26783</li>\n<li>CVE-2024-27056</li>\n<li>CVE-2024-28956</li>\n<li>CVE-2024-36903</li>\n<li>CVE-2024-36927</li>\n<li>CVE-2024-42079</li>\n<li>CVE-2024-46786</li>\n<li>CVE-2024-47736</li>\n<li>CVE-2024-47809</li>\n<li>CVE-2024-49968</li>\n<li>CVE-2024-49994</li>\n<li>CVE-2024-49998</li>\n<li>CVE-2024-50014</li>\n<li>CVE-2024-50063</li>\n<li>CVE-2024-50164</li>\n<li>CVE-2024-50298</li>\n<li>CVE-2024-53124</li>\n<li>CVE-2024-53170</li>\n<li>CVE-2024-54458</li>\n<li>CVE-2024-56631</li>\n<li>CVE-2024-56703</li>\n<li>CVE-2024-56719</li>\n<li>CVE-2024-57917</li>\n<li>CVE-2024-57924</li>\n<li>CVE-2024-57973</li>\n<li>CVE-2024-57977</li>\n<li>CVE-2024-57979</li>\n<li>CVE-2024-58011</li>\n<li>CVE-2024-58016</li>\n<li>CVE-2024-58020</li>\n<li>CVE-2024-58056</li>\n<li>CVE-2024-58058</li>\n<li>CVE-2024-58061</li>\n<li>CVE-2024-58086</li>\n<li>CVE-2025-21645</li>\n<li>CVE-2025-21648</li>\n<li>CVE-2025-21655</li>\n<li>CVE-2025-21676</li>\n<li>CVE-2025-21682</li>\n<li>CVE-2025-21702</li>\n<li>CVE-2025-21705</li>\n<li>CVE-2025-21706</li>\n<li>CVE-2025-21707</li>\n<li>CVE-2025-21718</li>\n<li>CVE-2025-21731</li>\n<li>CVE-2025-21745</li>\n<li>CVE-2025-21758</li>\n<li>CVE-2025-21760</li>\n<li>CVE-2025-21764</li>\n<li>CVE-2025-21765</li>\n<li>CVE-2025-21780</li>\n<li>CVE-2025-21795</li>\n<li>CVE-2025-21796</li>\n<li>CVE-2025-21802</li>\n<li>CVE-2025-21814</li>\n<li>CVE-2025-21846</li>\n<li>CVE-2025-21853</li>\n<li>CVE-2025-21861</li>\n<li>CVE-2025-21863</li>\n<li>CVE-2025-21864</li>\n<li>CVE-2025-21867</li>\n<li>CVE-2025-21875</li>\n<li>CVE-2025-21887</li>\n<li>CVE-2025-21913</li>\n<li>CVE-2025-21919</li>\n<li>CVE-2025-21925</li>\n<li>CVE-2025-21926</li>\n<li>CVE-2025-21938</li>\n<li>CVE-2025-21959</li>\n<li>CVE-2025-21999</li>\n<li>CVE-2025-22005</li>\n<li>CVE-2025-22015</li>\n<li>CVE-2025-22055</li>\n<li>CVE-2025-22056</li>\n<li>CVE-2025-22060</li>\n<li>CVE-2025-22083</li>\n<li>CVE-2025-22090</li>\n<li>CVE-2025-22095</li>\n<li>CVE-2025-22107</li>\n<li>CVE-2025-22111</li>\n<li>CVE-2025-22121</li>\n<li>CVE-2025-23136</li>\n<li>CVE-2025-23143</li>\n<li>CVE-2025-37785</li>\n<li>CVE-2025-37909</li>\n<li>CVE-2025-37917</li>\n<li>CVE-2025-37945</li>\n<li>CVE-2025-37959</li>\n<li>CVE-2025-37964</li>\n<li>CVE-2025-37972</li>\n<li>CVE-2025-37980</li>\n<li>CVE-2025-38125</li>\n<li>CVE-2025-38162</li>\n<li>CVE-2025-38192</li>\n<li>CVE-2025-38201</li>\n<li>CVE-2025-38232</li>\n<li>CVE-2025-38322</li>\n<li>CVE-2025-38591</li>\n<li>CVE-2025-38614</li>\n<li>CVE-2025-38681</li>\n<li>CVE-2025-38704</li>\n<li>CVE-2025-38721</li>\n<li>CVE-2025-38725</li>\n<li>CVE-2025-38727</li>\n<li>CVE-2025-38732</li>\n<li>CVE-2025-38736</li>\n<li>CVE-2025-39681</li>\n<li>CVE-2025-39691</li>\n<li>CVE-2025-39721</li>\n<li>CVE-2025-39748</li>\n<li>CVE-2025-39756</li>\n<li>CVE-2025-39764</li>\n<li>CVE-2025-39770</li>\n<li>CVE-2025-39773</li>\n<li>CVE-2025-39782</li>\n<li>CVE-2025-39795</li>\n<li>CVE-2025-39826</li>\n<li>CVE-2025-39827</li>\n<li>CVE-2025-39845</li>\n<li>CVE-2025-39866</li>\n<li>CVE-2025-39871</li>\n<li>CVE-2025-39931</li>\n<li>CVE-2025-39953</li>\n<li>CVE-2025-39955</li>\n<li>CVE-2025-39964</li>\n<li>CVE-2025-39977</li>\n<li>CVE-2025-39978</li>\n<li>CVE-2025-39980</li>\n<li>CVE-2025-40022</li>\n<li>CVE-2025-40070</li>\n<li>CVE-2025-40078</li>\n<li>CVE-2025-40080</li>\n<li>CVE-2025-40105</li>\n<li>CVE-2025-40135</li>\n<li>CVE-2025-40149</li>\n<li>CVE-2025-40196</li>\n<li>CVE-2025-40219</li>\n<li>CVE-2025-40261</li>\n<li>CVE-2025-40300</li>\n<li>CVE-2025-61984</li>\n<li>CVE-2025-61985</li>\n<li>CVE-2025-68206</li>\n<li>CVE-2025-68261</li>\n<li>CVE-2025-68264</li>\n<li>CVE-2025-68265</li>\n<li>CVE-2025-68266</li>\n<li>CVE-2025-68291</li>\n<li>CVE-2025-68337</li>\n<li>CVE-2025-68349</li>\n<li>CVE-2025-68363</li>\n<li>CVE-2025-68371</li>\n<li>CVE-2025-68724</li>\n<li>CVE-2025-68725</li>\n<li>CVE-2025-68742</li>\n<li>CVE-2025-68764</li>\n<li>CVE-2025-68773</li>\n<li>CVE-2025-68776</li>\n<li>CVE-2025-68782</li>\n<li>CVE-2025-68787</li>\n<li>CVE-2025-68788</li>\n<li>CVE-2025-68798</li>\n<li>CVE-2025-68803</li>\n<li>CVE-2025-68814</li>\n<li>CVE-2025-68816</li>\n<li>CVE-2025-68818</li>\n<li>CVE-2025-68820</li>\n<li>CVE-2025-71064</li>\n<li>CVE-2025-71075</li>\n<li>CVE-2025-71079</li>\n<li>CVE-2025-71085</li>\n<li>CVE-2025-71086</li>\n<li>CVE-2025-71088</li>\n<li>CVE-2025-71095</li>\n<li>CVE-2025-71097</li>\n<li>CVE-2025-71098</li>\n<li>CVE-2025-71104</li>\n<li>CVE-2025-71112</li>\n<li>CVE-2025-71113</li>\n<li>CVE-2025-71114</li>\n<li>CVE-2025-71120</li>\n<li>CVE-2025-71123</li>\n<li>CVE-2025-71131</li>\n<li>CVE-2025-71161</li>\n<li>CVE-2025-71162</li>\n<li>CVE-2025-71163</li>\n<li>CVE-2025-71185</li>\n<li>CVE-2025-71186</li>\n<li>CVE-2025-71189</li>\n<li>CVE-2025-71190</li>\n<li>CVE-2025-71191</li>\n<li>CVE-2025-71197</li>\n<li>CVE-2025-71221</li>\n<li>CVE-2025-71265</li>\n<li>CVE-2025-71266</li>\n<li>CVE-2025-71267</li>\n<li>CVE-2026-3497</li>\n<li>CVE-2026-22977</li>\n<li>CVE-2026-22979</li>\n<li>CVE-2026-22980</li>\n<li>CVE-2026-22982</li>\n<li>CVE-2026-22992</li>\n<li>CVE-2026-22994</li>\n<li>CVE-2026-23003</li>\n<li>CVE-2026-23005</li>\n<li>CVE-2026-23010</li>\n<li>CVE-2026-23011</li>\n<li>CVE-2026-23019</li>\n<li>CVE-2026-23026</li>\n<li>CVE-2026-23038</li>\n<li>CVE-2026-23054</li>\n<li>CVE-2026-23060</li>\n<li>CVE-2026-23083</li>\n<li>CVE-2026-23084</li>\n<li>CVE-2026-23086</li>\n<li>CVE-2026-23087</li>\n<li>CVE-2026-23095</li>\n<li>CVE-2026-23100</li>\n<li>CVE-2026-23103</li>\n<li>CVE-2026-23110</li>\n<li>CVE-2026-23111</li>\n<li>CVE-2026-23113</li>\n<li>CVE-2026-23154</li>\n<li>CVE-2026-23204</li>\n<li>CVE-2026-23231</li>\n<li>CVE-2026-23242</li>\n<li>CVE-2026-23243</li>\n<li>CVE-2026-23245</li>\n<li>CVE-2026-23255</li>\n<li>CVE-2026-23270</li>\n<li>CVE-2026-23271</li>\n<li>CVE-2026-23273</li>\n<li>CVE-2026-23274</li>\n<li>CVE-2026-23277</li>\n<li>CVE-2026-23284</li>\n<li>CVE-2026-23287</li>\n<li>CVE-2026-23290</li>\n<li>CVE-2026-23293</li>\n<li>CVE-2026-23300</li>\n<li>CVE-2026-23304</li>\n<li>CVE-2026-23319</li>\n<li>CVE-2026-23321</li>\n<li>CVE-2026-23335</li>\n<li>CVE-2026-23340</li>\n<li>CVE-2026-23343</li>\n<li>CVE-2026-23351</li>\n<li>CVE-2026-23359</li>\n<li>CVE-2026-23365</li>\n<li>CVE-2026-23368</li>\n<li>CVE-2026-23370</li>\n<li>CVE-2026-23378</li>\n<li>CVE-2026-23379</li>\n<li>CVE-2026-23381</li>\n<li>CVE-2026-23391</li>\n<li>CVE-2026-23392</li>\n<li>CVE-2026-23397</li>\n<li>CVE-2026-23398</li>\n<li>CVE-2026-23399</li>\n<li>CVE-2026-23414</li>\n<li>CVE-2026-23422</li>\n<li>CVE-2026-23434</li>\n<li>CVE-2026-23438</li>\n<li>CVE-2026-23439</li>\n<li>CVE-2026-23446</li>\n<li>CVE-2026-23449</li>\n<li>CVE-2026-23450</li>\n<li>CVE-2026-23452</li>\n<li>CVE-2026-23454</li>\n<li>CVE-2026-23455</li>\n<li>CVE-2026-23456</li>\n<li>CVE-2026-23457</li>\n<li>CVE-2026-23458</li>\n<li>CVE-2026-23463</li>\n<li>CVE-2026-23474</li>\n<li>CVE-2026-23475</li>\n<li>CVE-2026-27135</li>\n<li>CVE-2026-31389</li>\n<li>CVE-2026-31391</li>\n<li>CVE-2026-31396</li>\n<li>CVE-2026-31402</li>\n<li>CVE-2026-31403</li>\n<li>CVE-2026-31411</li>\n<li>CVE-2026-31414</li>\n<li>CVE-2026-31415</li>\n<li>CVE-2026-31416</li>\n<li>CVE-2026-31417</li>\n<li>CVE-2026-31418</li>\n<li>CVE-2026-31421</li>\n<li>CVE-2026-31422</li>\n<li>CVE-2026-31423</li>\n<li>CVE-2026-31424</li>\n<li>CVE-2026-31427</li>\n<li>CVE-2026-31428</li>\n<li>CVE-2026-31441</li>\n<li>CVE-2026-31446</li>\n<li>CVE-2026-31447</li>\n<li>CVE-2026-31448</li>\n<li>CVE-2026-31449</li>\n<li>CVE-2026-31450</li>\n<li>CVE-2026-31452</li>\n<li>CVE-2026-31466</li>\n<li>CVE-2026-31469</li>\n<li>CVE-2026-31485</li>\n<li>CVE-2026-31494</li>\n<li>CVE-2026-31495</li>\n<li>CVE-2026-31496</li>\n<li>CVE-2026-31503</li>\n<li>CVE-2026-31504</li>\n<li>CVE-2026-31507</li>\n<li>CVE-2026-31508</li>\n<li>CVE-2026-31515</li>\n<li>CVE-2026-31518</li>\n<li>CVE-2026-31521</li>\n<li>CVE-2026-31533</li>\n<li>CVE-2026-31546</li>\n<li>CVE-2026-31555</li>\n<li>CVE-2026-31563</li>\n<li>CVE-2026-31565</li>\n<li>CVE-2026-31628</li>\n<li>CVE-2026-31634</li>\n<li>CVE-2026-31649</li>\n<li>CVE-2026-31651</li>\n<li>CVE-2026-31658</li>\n<li>CVE-2026-31664</li>\n<li>CVE-2026-31665</li>\n<li>CVE-2026-31669</li>\n<li>CVE-2026-31670</li>\n<li>CVE-2026-31671</li>\n<li>CVE-2026-31674</li>\n<li>CVE-2026-31680</li>\n<li>CVE-2026-31681</li>\n<li>CVE-2026-31682</li>\n<li>CVE-2026-31700</li>\n<li>CVE-2026-31737</li>\n<li>CVE-2026-31752</li>\n<li>CVE-2026-31761</li>\n<li>CVE-2026-31768</li>\n<li>CVE-2026-40355</li>\n<li>CVE-2026-41989</li>\n<li>CVE-2026-43011</li>\n<li>CVE-2026-43024</li>\n<li>CVE-2026-43025</li>\n<li>CVE-2026-43026</li>\n<li>CVE-2026-43027</li>\n<li>CVE-2026-43028</li>\n<li>CVE-2026-43030</li>\n<li>CVE-2026-43033</li>\n<li>CVE-2026-43035</li>\n<li>CVE-2026-43038</li>\n<li>CVE-2026-43040</li>\n<li>CVE-2026-43057</li>\n<li>CVE-2026-43071</li>\n<li>CVE-2026-43085</li>\n<li>CVE-2026-43089</li>\n<li>CVE-2026-43116</li>\n<li>CVE-2026-43216</li>\n<li>CVE-2026-43303</li>\n<li>CVE-2026-43492</li>\n<li>CVE-2026-43499</li>\n<li>CVE-2026-43501</li>\n<li>CVE-2026-45841</li>\n<li>CVE-2026-46015</li>\n<li>CVE-2026-46021</li>\n<li>CVE-2026-46033</li>\n<li>CVE-2026-46037</li>\n<li>CVE-2026-46040</li>\n<li>CVE-2026-46046</li>\n<li>CVE-2026-46086</li>\n<li>CVE-2026-46101</li>\n<li>CVE-2026-46116</li>\n<li>CVE-2026-46132</li>\n<li>CVE-2026-46172</li>\n<li>CVE-2026-46173</li>\n<li>CVE-2026-46174</li>\n<li>CVE-2026-46193</li>\n<li>CVE-2026-46303</li>\n<li>CVE-2026-46306</li>\n<li>CVE-2026-46323</li>\n<li>CVE-2026-46333</li>\n<li>CVE-2026-52910</li>\n<li>CVE-2026-52912</li>\n<li>CVE-2026-52930</li>\n<li>CVE-2026-52933</li>\n<li>CVE-2026-52942</li>\n<li>CVE-2026-52943</li>\n<li>CVE-2026-52946</li>\n<li>CVE-2026-52970</li>\n<li>CVE-2026-52986</li>\n<li>CVE-2026-52998</li>\n<li>CVE-2026-52999</li>\n<li>CVE-2026-53001</li>\n<li>CVE-2026-53002</li>\n<li>CVE-2026-53006</li>\n<li>CVE-2026-53012</li>\n<li>CVE-2026-53050</li>\n<li>CVE-2026-53134</li>\n<li>CVE-2026-53218</li>\n<li>CVE-2026-53219</li>\n<li>CVE-2026-53223</li>\n<li>CVE-2026-53236</li>\n<li>CVE-2026-53239</li>\n<li>CVE-2026-53249</li>\n<li>CVE-2026-53268</li>\n<li>CVE-2026-53269</li>\n<li>CVE-2026-53275</li>\n<li>CVE-2026-53295</li>\n<li>CVE-2026-53352</li>\n<li>CVE-2026-53400</li>\n<li>CVE-2026-63810</li>\n<li>CVE-2026-64279</li>\n<li>CVE-2026-64317</li>\n<li>CVE-2026-64370</li>\n<li>CVE-2026-64371</li>\n<li>CVE-2026-64375</li>\n<li>CVE-2026-64411</li>\n<li>CVE-2026-64412</li>\n<li>CVE-2026-64413</li>\n<li>CVE-2026-64422</li>\n<li>CVE-2026-64423</li>\n<li>CVE-2026-64425</li>\n<li>CVE-2026-64538</li>\n<li>CVE-2026-64545</li>\n<li>CVE-2026-64552</li>\n<li>CVE-2026-64560</li>\n</ul>\n<p>&nbsp;</p>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens' operational guidelines for Industrial Security (<a href="https://www.siemens.com/cert/operational-guidelines-industrial-securit">https://www.siemens.com/cert/operational-guidelines-industrial-securit</a>y), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: <a href="https://www.siemens.com/industrialsecurity">https://www.siemens.com/industrialsecurity</a></p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: <a href="https://www.siemens.com/cert/advisories">https://www.siemens.com/cert/advisories</a></p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: <a href="https://www.siemens.com/productcert/terms-of-use">https://www.siemens.com/productcert/terms-of-use</a>.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.</p>\n<ul>\n<li>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<p>&nbsp;</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT <a href="https://productcert.siemens.com/productcert/html/ssa-457936.html">SSA-457936</a> from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-457936 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens WinCC", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-13.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens WinCC are affected:</p>\n<ul>\n<li>SIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241)</li>\n<li>SIMATIC WinCC V8.0 vers:intdot/&lt;8.0.0.11 (CVE-2026-59241)</li>\n<li>SIMATIC WinCC V8.1 vers:intdot/&lt;8.1.7 (CVE-2026-59241)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.8</td>\n<td>Siemens</td>\n<td>SIMATIC WinCC V7.5</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Incorrect Privilege Assignment</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-59241</div>\n<div class="c-expandable-textbox__body">The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>SIMATIC WinCC V7.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC WinCC V8.0 &lt; V8.0 Update 11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V8.0 Update 11 or later version</p>\n</div>\n<hr>\n<h5>SIMATIC WinCC V8.1 &lt; V8.1 Update 7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V8.1 Update 7 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/266.html">CWE-266 Incorrect Privilege Assignment</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-59241">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-550198 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-550198 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Industrial Edge Device Kit", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-09.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.</strong></p>\n<p>The following versions of Siemens Industrial Edge Device Kit are affected:</p>\n<ul>\n<li>Industrial Edge Device Kit - arm64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.26 vers:intdot/&lt;1.26.2.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.27 vers:intdot/&lt;1.27.1.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.28 vers:intdot/&lt;1.28.0.6 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.26 vers:intdot/&lt;1.26.2.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.27 vers:intdot/&lt;1.27.1.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.28 vers:intdot/&lt;1.28.0.6 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 9.1</td>\n<td>Siemens</td>\n<td>Industrial Edge Device Kit - arm64 V1.10</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Path Traversal: '.../...//'</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-44414</div>\n<div class="c-expandable-textbox__body">Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>48 Affected Products</h4>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/35.html">CWE-35 Path Traversal: '.../...//'</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.8</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-44414">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-44415</div>\n<div class="c-expandable-textbox__body">Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>96 Affected Products</h4>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/35.html">CWE-35 Path Traversal: '.../...//'</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>9.1</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-44415">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-377139 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-377139 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Capital Embedded AR Classic", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-04.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</strong></p>\n<p>The following versions of Siemens Capital Embedded AR Classic are affected:</p>\n<ul>\n<li>Capital Embedded AR Classic 431-422 vers:all/* (CVE-2026-89208)</li>\n<li>Capital Embedded AR Classic R20-11 vers:intdot/&lt;2303 (CVE-2026-89208)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 5.3</td>\n<td>Siemens</td>\n<td>Capital Embedded AR Classic 431-422</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Read</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89208</div>\n<div class="c-expandable-textbox__body">The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>Capital Embedded AR Classic 431-422</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Apply network segmentation and put the ECUs behind properly configured gateways/firewalls</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Capital Embedded AR Classic R20-11 &lt; V2303</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Apply network segmentation and put the ECUs behind properly configured gateways/firewalls</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2303 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89208">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-055299 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-055299 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "InterSystems Corporation InterSystems IRIS for Health", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-295-01.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.</strong></p>\n<p>The following versions of InterSystems Corporation InterSystems IRIS for Health are affected:</p>\n<ul>\n<li>InterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.1</td>\n<td>InterSystems Corporation</td>\n<td>InterSystems IRIS for Health</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Cleartext Transmission of Sensitive Information</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Healthcare and Public Health</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>United States</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-111594</div>\n<div class="c-expandable-textbox__body">InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2026.2.0.221</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2026.1.0.235</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2025.3.0.226</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/319.html">CWE-319 Cleartext Transmission of Sensitive Information</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.1</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n<tr>\n<td>4.0</td>\n<td>9.2</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-111594">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Abhinav Agarwal reported this vulnerability to CISA and InterSystems Corporation.</li>\n</ul>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<p>CISA also recommends users take the following measures to protect themselves from social engineering attacks:</p>\n<ul type="disc">\n<li>Do not click web links or open attachments in unsolicited email messages.</li>\n<li>Refer to <a href="https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing">Recognizing and Avoiding Email Scams</a> for more information on avoiding email scams.</li>\n<li>Refer to <a href="https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks">Avoiding Social Engineering and Phishing Attacks</a> for more information on social engineering attacks.</li>\n</ul>\n<p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.</p>\n<hr>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-22</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-22</td>\n<td>1</td>\n<td>Initial Publication</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens PSS(R)SINCAL", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-06.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.</strong></p>\n<p>The following versions of Siemens PSS(R)SINCAL are affected:</p>\n<ul>\n<li>PSS(R)SINCAL V21.5 vers:all/* (CVE-2026-84854)</li>\n<li>PSS(R)SINCAL V22.0 vers:all/* (CVE-2026-84854)</li>\n<li>PSS(R)SINCAL V22.5 vers:intdot/&lt;22.5.5 (CVE-2026-84854)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7</td>\n<td>Siemens</td>\n<td>PSS(R)SINCAL V21.5</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Write</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-84854</div>\n<div class="c-expandable-textbox__body">In the WibuKey driver, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>PSS(R)SINCAL V21.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>PSS(R)SINCAL V22.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>PSS(R)SINCAL V22.5 &lt; V22.5 Update 5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V22.5 Update 5 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/787.html">CWE-787 Out-of-bounds Write</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-84854">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design. Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-148322 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-148322 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Software Center", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-03.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it.</strong></p>\n<p>The following versions of Siemens Software Center are affected:</p>\n<ul>\n<li>Siemens Software Center vers:intdot/&lt;4.0.9.8 (CVE-2026-110936)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 6.7</td>\n<td>Siemens</td>\n<td>Siemens Software Center</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Uncontrolled Search Path Element</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-110936</div>\n<div class="c-expandable-textbox__body">The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>Siemens Software Center &lt; V4.0.9.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V4.0.9.8 or later version (All existing versions of SSC will be auto updated on next startup. The latest version can also be downloaded in the respective link)</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/427.html">CWE-427 Uncontrolled Search Path Element</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.7</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-110936">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-580366 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-15</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-15</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-17</td>\n<td>2</td>\n<td>Added remediation for Siemens Software Center</td>\n</tr>\n<tr>\n<td>2026-10-19</td>\n<td>3</td>\n<td>Added reference to blog post about active exploitation of the vulnerability</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>4</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-580366 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens RUGGEDCOM CROSSBOW Station Access Controller", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-15.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:</p>\n<ul>\n<li>RUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/&lt;6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 9.8</td>\n<td>Siemens</td>\n<td>RUGGEDCOM CROSSBOW Station Access Controller (SAC)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Numeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding, Heap-based Buffer Overflow</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-6965</div>\n<div class="c-expandable-textbox__body">There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/197.html">CWE-197 Numeric Truncation Error</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-6965">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-70873</div>\n<div class="c-expandable-textbox__body">An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/244.html">CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-70873">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-71316</div>\n<div class="c-expandable-textbox__body">SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options. Fixed on or around 2025-12-26.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/176.html">CWE-176 Improper Handling of Unicode Encoding</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>9.8</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-71316">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-11822</div>\n<div class="c-expandable-textbox__body">SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/122.html">CWE-122 Heap-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-11822">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-11824</div>\n<div class="c-expandable-textbox__body">SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/122.html">CWE-122 Heap-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-11824">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-765416 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-765416 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "NCSC (UK)", "title": "Kritisches Sicherheitsproblem, das PHP betrifft", "url": "https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php", "published": "Wed, 21 Oct 2026 12:00:00 +0000", "summary": "Aktualisiert: Das NCSC empfiehlt britischen Organisationen, sofortige Maßnahmen zur Minderung einer Sicherheitslücke in PHP (CVE-2026-109618 und CVE-2026-109619) zu ergreifen."}, {"source": "NCSC (UK)", "title": "Einführung eines neuen KI-Kapitels im NCSC-Forschungsproblem-Buch", "url": "https://www.ncsc.gov.uk/blogs/introducing-new-ai-chapter-ncsc-research-problem-book", "published": "Tue, 20 Oct 2026 12:00:00 +0000", "summary": "An der Schnittstelle von KI und Cybersicherheit vollzieht sich eine Revolution."}, {"source": "NCSC (UK)", "title": "Verwendung von TLS zum Schutz von Daten", "url": "https://www.ncsc.gov.uk/guidance/using-tls-to-protect-data", "published": "Thu, 15 Oct 2026 12:00:00 +0000", "summary": "Empfohlene Profile zur sicheren Konfiguration von TLS für die gängigsten Versionen und Szenarien, mit zusätzlichen Anleitungen zum Umgang mit älteren Versionen."}, {"source": "NCSC (UK)", "title": "Post-Quantum-Updates unserer TLS-Empfehlungen", "url": "https://www.ncsc.gov.uk/blogs/post-quantum-updates-to-our-tls-guidance", "published": "Thu, 15 Oct 2026 12:00:00 +0000", "summary": "Das NCSC veröffentlicht seine Empfehlungen zur Konfiguration von Post-Quanten-Kryptographie in TLS. Jetzt ist es Zeit zu migrieren."}, {"source": "NCSC (UK)", "title": "Helfen Sie dem NCSC zu verstehen, wie Organisationen das Risiko der externen Angriffsfläche angehen", "url": "https://www.ncsc.gov.uk/blogs/help-ncsc-understand-how-organisations-approach-external-attack-surface-risk", "published": "Mon, 12 Oct 2026 12:00:00 +0000", "summary": "Wir möchten von Personen hören, die an der Bewertung, Auswahl oder Einführung von EASM beteiligt sind."}, {"source": "NCSC (UK)", "title": "Von China gesteuerte bösartige Akteure werden von britischen und internationalen Partnern für die Zielsetzung sensibler Daten weltweit kritisiert", "url": "https://www.ncsc.gov.uk/news/china-linked-actors-called-out-by-uk-and-international-partners-for-targeting-sensitive-data", "published": "Thu, 08 Oct 2026 12:00:00 +0000", "summary": "Gemeinsame Warnung mit internationalen Partnern hebt bösartige Zielsetzung von Organisationen aus verschiedenen Branchen weltweit hervor."}, {"source": "NCSC (UK)", "title": "Vorfall, der ASOS-Kunden betrifft", "url": "https://www.ncsc.gov.uk/news/incident-affecting-asos-customers", "published": "Tue, 06 Oct 2026 12:00:00 +0000", "summary": "ASOS hat mitgeteilt, dass ein Cybervorfall untersucht wird und dass möglicherweise persönliche Informationen einiger Kunden abgerufen wurden."}, {"source": "NCSC (UK)", "title": "Ausnutzung von Schwachstellen, die Citrix NetScaler ADC und Citrix NetScaler Gateway betreffen", "url": "https://www.ncsc.gov.uk/news/exploitation-of-vulnerabilities-affecting-citrix-netscaler-adc-and-citrix-netscaler-gateway", "published": "Mon, 28 Sep 2026 12:00:00 +0000", "summary": "Das NCSC fordert britische Organisationen auf, Schwachstellen, die Citrix NetScaler ADC und Gateway betreffen, umgehend zu beheben, von denen zwei aktiv ausgenutzt werden."}, {"source": "NCSC (UK)", "title": "Man verteidigt nicht einfach agentisch", "url": "https://www.ncsc.gov.uk/blogs/one-does-not-simply-defend-agentically", "published": "Mon, 21 Sep 2026 12:00:00 +0000", "summary": "Verteidiger können KI nicht auf dieselbe Weise einsetzen wie Angreifer, aber es gibt viel, was sie tun können, um das Potenzial der agentischen Cyberverteidigung freizuschalten."}, {"source": "NCSC (UK)", "title": "Gegner-Simulation: Was Sie wissen müssen", "url": "https://www.ncsc.gov.uk/guidance/adversary-simulation-what-you-need-to-know", "published": "Thu, 17 Sep 2026 12:00:00 +0000", "summary": "Gegner-Simulationen („Red Teaming“) testen Ihre Fähigkeit, Cyberangriffe zu verhindern, zu erkennen und darauf zu reagieren."}, {"source": "NCSC (UK)", "title": "Cyber Adversary Simulation (CyAS): Schemadokumente sind jetzt verfügbar", "url": "https://www.ncsc.gov.uk/blogs/cyber-adversary-simulation-cyas-scheme-documents-now-available", "published": "Thu, 17 Sep 2026 12:00:00 +0000", "summary": "Unsere Sicht auf eine gute Cyber-Adversary-Simulation – und wie zertifizierte Anbieter sie liefern können."}, {"source": "NCSC (UK)", "title": "Iranische Cyber-Zielsetzung gegen Dissidenten, Aktivisten und Journalisten", "url": "https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists", "published": "Tue, 15 Sep 2026 12:00:00 +0000", "summary": "Hinweis zum CHOSEN BRICK-Schadprogramm, einschließlich technischer Analyse und Empfehlungen, um Einzelpersonen und Organisationen bei ihrem Schutz zu unterstützen."}, {"source": "NCSC (UK)", "title": "UK und Verbündete decken Spyware auf, die von iranischen staatlichen Akteuren verwendet wird, um Dissidenten, Aktivisten und Journalisten zu überwachen", "url": "https://www.ncsc.gov.uk/news/uk-allies-expose-spyware-iranian-state-actors-target-dissidents-activists-journalists", "published": "Tue, 15 Sep 2026 12:00:00 +0000", "summary": "UK und Verbündete geben Ratschläge, um Organisationen und gefährdete Einzelpersonen zu helfen, die Bedrohung durch die CHOSEN BRICK-Malware zu erkennen und zu bekämpfen."}, {"source": "NCSC (UK)", "title": "Die verborgenen Risiken von Shadow AI", "url": "https://www.ncsc.gov.uk/blogs/the-hidden-risks-of-shadow-ai", "published": "Mon, 07 Sep 2026 12:00:00 +0000", "summary": "Das Verständnis dafür, warum Mitarbeiter nicht genehmigte KI-Tools verwenden, ist entscheidend für die Bewältigung der Sicherheitsprobleme, die diese verursachen können."}, {"source": "NCSC (UK)", "title": "Störende Cyberaktivitäten unterstreichen das Risiko durch internetexponierte Systeme und Edge-Geräte", "url": "https://www.ncsc.gov.uk/news/disruptive-cyber-activity-highlights-risk-from-internet-exposed-systems-and-edge-devices", "published": "Thu, 27 Aug 2026 12:00:00 +0000", "summary": "Betreiber von Operational Technology werden aufgefordert, vermeidbare Schwachstellen zu beheben und langfristige Cyber-Resilienz aufzubauen."}, {"source": "SANS ISC (US)", "title": "YARA-X 1.22.0 Release, (Sun, Oct 25th)", "url": "https://isc.sans.edu/diary/rss/33454", "published": "Sun, 25 Oct 2026 19:57:53 GMT", "summary": "

YARA-X&#;x26;#;39;s 1.22.0 Release bringt 11 Verbesserungen und 9 Fehlerbehebungen mit sich.

"}, {"source": "SANS ISC (US)", "title": "(Zuverlässig)? php2shell Ausnutzbarkeit, (Fr, 23. Okt)", "url": "https://isc.sans.edu/diary/rss/33452", "published": "Fri, 23 Oct 2026 20:04:47 GMT", "summary": "

Gestern ist jeder wie verrückt herumgelaufen (ich eingeschlossen :), wegen der php2shell-Schwachstelle.

"}, {"source": "SANS ISC (US)", "title": "PHP-Schwachstellen-Zusammenfassung, (Fr, 23. Okt)", "url": "https://isc.sans.edu/diary/rss/33450", "published": "Fri, 23 Oct 2026 13:43:20 GMT", "summary": "

Heute Morgen sind wir zur Infocon Green zurückgekehrt. Wie üblich heben wir die Infocon an, um Sie auf neu entstehende Situationen hinzuweisen, die sofortige Aufmerksamkeit erfordern. PHP fiel in diese Kategorie. Bis jetzt wissen Sie entweder Bescheid davon, oder Sie werden es wahrscheinlich nie erfahren, daher ist es Zeit, zum \"Normalbetrieb\" zurückzukehren.

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Friday, October 23rd, 2026 https://isc.sans.edu/podcastdetail/10148, (Fri, Oct 23rd)", "url": "https://isc.sans.edu/diary/rss/33448", "published": "Fri, 23 Oct 2026 10:25:11 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License."}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)", "url": "https://isc.sans.edu/diary/rss/33446", "published": "Thu, 22 Oct 2026 02:00:02 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License."}, {"source": "SANS ISC (US)", "title": "Kritische PHP-Schwachstelle (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)", "url": "https://isc.sans.edu/diary/rss/33440", "published": "Wed, 21 Oct 2026 21:02:43 GMT", "summary": "

PHP.net hat angekündigt, heute ein kritisches Update zu veröffentlichen. Wir haben beschlossen, die InfoCon auf GELB zu ändern, aufgrund der weitverbreiteten Nutzung von PHP, der erwarteten Schwere der Schwachstelle (CVSS 9.4) und der Verfügbarkeit früher PoC-Exploits, bevor das Patch verfügbar war.

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)", "url": "https://isc.sans.edu/diary/rss/33438", "published": "Wed, 21 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License."}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)", "url": "https://isc.sans.edu/diary/rss/33436", "published": "Tue, 20 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License."}, {"source": "SANS ISC (US)", "title": "Verwaiste VBA-Projekte in DWG-Dateien: YARA-Regel, (Sun, Oct 18th)", "url": "https://isc.sans.edu/diary/rss/33434", "published": "Sun, 18 Oct 2026 12:59:30 GMT", "summary": "

Hier ist die YARA-Regel, die ich zur Erkennung von \"Orphaned VBA Projects Inside DWG Files\" verwendet habe.

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)", "url": "https://isc.sans.edu/diary/rss/33432", "published": "Fri, 16 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License."}], "industry": [{"title": "PHP2Shell-Exploitierung trifft Regierungsbehörde inmitten globaler Scans und Anzeichen von KI-gestütztem Hacken", "why": "Threat-Akteure nutzen agentische KI, um Post-Exploitation-Aktivitäten gegen die kritischen PHP-RCE-Schwachstellen zu beschleunigen, wobei eine Regierungsbehörde innerhalb von zwei Stunden nach dem ersten Zugriff kompromittiert wurde.", "url": "https://thehackernews.com/2026/10/php2shell-exploitation-hits-government.html", "source": "The Hacker News"}, {"title": "Unbehebbte Tailscale-SSH-Schwachstellen könnten es einem kompromittierten Gerät ermöglichen, Root-Zugriff auf andere Server zu erlangen", "why": "Ein Sicherheitsforscher hat eine kritische Fehlkonfiguration in Tailscale SSH identifiziert, die bei aktivierter Port-Weiterleitung seitliche Bewegung und die Erhöhung der Berechtigungen auf Root-Ebene auf anderen Netzwerkknoten ermöglicht.", "url": "https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html", "source": "The Hacker News"}, {"title": "Brotli-Decoder-Fehler hinter Node.js RCE betrifft auch Bun, Python und andere weitverbreitete Software", "why": "Eine Speicherabsturkschwachstelle in Googles Brotli-Decoder (CVE-2026-111497) betrifft eine breite Palette beliebter Software-Stacks und birgt ein erhebliches Risiko für die Ausführung von Code aus der Ferne über manipulierte komprimierte Daten.", "url": "https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html", "source": "The Hacker News"}, {"title": "CISA warnt vor zwei aktiv ausgenutzten kritischen Schwachstellen in Collabora Online und Arista VeloCloud", "why": "Die CISA hat zwei kritische Schwachstellen in ihren Katalog der bekannten ausgenutzten Schwachstellen aufgenommen, was auf eine aktive Ausnutzung von Fehlern in Collabora Online und Arista VeloCloud Orchestrator in der Praxis hinweist.", "url": "https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html", "source": "The Hacker News"}, {"title": "BlackX UEFI Bootkit umgeht Secure Boot auf gepatchten Windows-Systemen ohne Widerrufe", "why": "Kaspersky berichtet über einen neuen UEFI-Bootkit, der diplomatische Organisationen in Zentralasien angreift und Secure Boot auf Systemen umgeht, die bestimmte Zertifikatswiderrufe nicht angewendet haben.", "url": "https://thehackernews.com/2026/10/blackx-uefi-bootkit-bypasses-secure.html", "source": "The Hacker News"}, {"title": "eMudhra verlässt den globalen TLS-Zertifikatmarkt nach Kompromittierung der CA-Signaturschlüssel", "why": "Die Kompromittierung von acht Zwischen-CAs mit lächerlich schwachen privaten Schlüsseln erzwingt eine Massenmigration von TLS-Zertifikaten und verdeutlicht kritische Lücken in der Verwaltung von Drittanbieter-Trust-Stores für Java- und Nicht-Browser-Systeme.", "url": "https://www.csoonline.com/article/4239634/emudhra-quits-global-tls-certificate-market-after-compromise-of-ca-signing-keys-2.html", "source": "CSO Online"}, {"title": "Sicherheitsteams werden aufgefordert, ihre Verteidigung auf das Schwachstellenprofil zu konzentrieren, das Angreifer am häufigsten angreifen", "why": "Daten von Rapid7 zeigen, dass Angreifer remote, nicht authentifizierte Zero-Click-Schwachstellen innerhalb von 72 Stunden weaponisieren, was einen Wandel vom monatlichen Patching zu einer risikobasierten, sofortigen Triage von CVEs mit hoher Schwere erfordert.", "url": "https://www.csoonline.com/article/4239255/security-teams-urged-to-center-defense-on-the-single-profile-attackers-target-most.html", "source": "CSO Online"}, {"title": "Möglicher neuer Cellebrite iPhone Radio Zero-Day", "why": "Ein geleaktes Dokument deutet darauf hin, dass Cellebrite eine neue Funktion namens 'Advanced Unlocks' entwickelt hat, die über ein dediziertes Gerät gegen Stolen Device Protection wirkt, was erhebliche Bedenken hinsichtlich der physischen Sicherheit und der Ausnutzung von Zero-Day-Schwachstellen aufwirft.", "url": "https://www.schneier.com/blog/archives/2026/10/possible-new-cellebrite-iphone-radio-zero-day.html", "source": "Schneier on Security"}], "iocs": [{"ioc": "ae1241f4a4787c0362285f91657c4f91722345c78bd8b986f8f5e88d6db6083c", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "Mirai", "confidence_level": 100, "first_seen": "2026-10-26 02:55:44 UTC", "reference": null}, {"ioc": "014e2e634bfdfc4ca6600898ad3d3ade92fcea86c9018c50bd057ef9baf8582a", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:43 UTC", "reference": null}, {"ioc": "f1d7fda8e42f2f6376d2e2ed4192b291a882ba29c5bc55b0745e218c10074896", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:42 UTC", "reference": null}, {"ioc": "7cc069a862258bd7ebfcaebf5bff72cc9ffbcb10e5ddb514a92dbf08f10d94fe", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:41 UTC", "reference": null}, {"ioc": "2b5b0ba9685b09277c3fee6c19e3ded60e57a72418f2550f2b1e43e00e1aebe8", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:40 UTC", "reference": null}, {"ioc": "fea6e379e5864f824165cd54548ec905672862fbe3cabfd04b7c59bb691541e6", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:39 UTC", "reference": null}, {"ioc": "a4389db74221b51ac7b1d60e30c954c20f639af06e2aefd79a57c1b3b137cd02", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:37 UTC", "reference": null}, {"ioc": "2e093d09ceb674fe47e130112dd38e753acedf1fec9e947149a7a2ca7d584fdb", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:36 UTC", "reference": null}, {"ioc": "deb1f5d8b7de5fe4b2370147a0a7871867b07edb2b72c2fec4ff191526fb0126", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:35 UTC", "reference": null}, {"ioc": "e28df40dc234353fbc06390833e0305a2e7bcd150e324cf9b0812d0ccc27d932", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:34 UTC", "reference": null}, {"ioc": "f2c33bee5bb42be519c8735151349bcbf8d91a749be7604ad5c970054195831f", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:33 UTC", "reference": null}, {"ioc": "70473b5416d501b66e4976a352dab4a8d19080bd4a2d8e5bc86a7b48209d3020", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:32 UTC", "reference": null}, {"ioc": "09f365cc415195f75e5aaa64137bb02d11d605e8c37b2783b93a383575ef4907", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:31 UTC", "reference": null}, {"ioc": "b8ab7dcb982eb6c2889bda259d85c8cd86001cad2b8ee22aa58662415e3012c4", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:30 UTC", "reference": null}, {"ioc": "e0fabbd75a800c5c18bab1a50d8225a0282c18f966acd76e4a4a914163940d14", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:29 UTC", "reference": null}], "iobs": [{"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-110447", "attack_technique": null}, {"behaviour": "OS command injection", "based_on": "CWE-78", "cve": "CVE-2026-110447", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-106931", "attack_technique": null}, {"behaviour": "OS command injection", "based_on": "CWE-78", "cve": "CVE-2026-106931", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96654", "attack_technique": null}, {"behaviour": "exploitation of Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability", "based_on": "CWE-84", "cve": "CVE-2026-96654", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96652", "attack_technique": null}, {"behaviour": "server-side request forgery (SSRF) callbacks", "based_on": "CWE-918", "cve": "CVE-2026-96652", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96656", "attack_technique": null}, {"behaviour": "exploitation of Plex Media Server External Control of File Name or Path Vulnerability", "based_on": "CWE-73", "cve": "CVE-2026-96656", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96655", "attack_technique": null}, {"behaviour": "server-side request forgery (SSRF) callbacks", "based_on": "CWE-918", "cve": "CVE-2026-96655", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-114625", "attack_technique": null}, {"behaviour": "SQL injection", "based_on": "CWE-89", "cve": "CVE-2026-114625", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-110936", "attack_technique": null}, {"behaviour": "exploitation of Siemens Software Center Uncontrolled Search Path Element Vulnerability", "based_on": "CWE-427", "cve": "CVE-2026-110936", "attack_technique": null}], "sources_failed": [], "quiet_week": false, "byline": "Curated for you by Geek with the Peak", "_text_model": "dgx/vllm/qwen3.8-27b-nvfp4", "rubric_verdict": "APPROVE", "rubric_reasons": [], "rubric_judge": "m3/mlx/qwen3-coder-next-4bit", "language": "de", "translated_by": "dgx/vllm/qwen3.8-27b-nvfp4", "source_language": "en"}