{"date": "2026-10-26", "generated_at": "2026-10-26T03:05:53.488317+00:00", "headline": "Las vulnerabilidades de inyección de comandos y SSRF en herramientas de oficina y medios están siendo explotadas activamente, lo que exige una validación continua inmediata en lugar de un parcheo pasivo.", "summary": "El panorama de amenazas actual está dominado por la explotación activa de vulnerabilidades de inyección de comandos del sistema operativo y SSRF en software ampliamente desplegado como Collabora Online, Plex y herramientas de Siemens. Con la adición de nuevas entradas de CISA al catálogo de Vulnerabilidades Explotadas Conocidas, el riesgo de acceso no autorizado y exfiltración de datos ya no es teórico. La presencia de nuevos payloads de Mirai y SalatStealer en el mundo real señala que los atacantes están encadenando estas debilidades con familias de malware establecidas. Su equipo de seguridad debe pasar de suponer el cumplimiento de parches a demostrar la eficacia de los controles mediante simulación continua. Este breve informe detalla las vulnerabilidades específicas y los pasos de validación concretos necesarios para garantizar que sus defensas realmente detengan estos ataques antes de que se conviertan en brechas.", "brief": {"headline": "Las vulnerabilidades de inyección de comandos y SSRF en herramientas de oficina y medios están siendo explotadas activamente, lo que exige una validación continua inmediata en lugar de un parcheo pasivo.", "summary": "El panorama de amenazas actual está dominado por la explotación activa de vulnerabilidades de inyección de comandos del sistema operativo y SSRF en software ampliamente desplegado como Collabora Online, Plex y herramientas de Siemens. Con la adición de nuevas entradas de CISA al catálogo de Vulnerabilidades Explotadas Conocidas, el riesgo de acceso no autorizado y exfiltración de datos ya no es teórico. La presencia de nuevos payloads de Mirai y SalatStealer en el mundo real señala que los atacantes están encadenando estas debilidades con familias de malware establecidas. Su equipo de seguridad debe pasar de suponer el cumplimiento de parches a demostrar la eficacia de los controles mediante simulación continua. Este breve informe detalla las vulnerabilidades específicas y los pasos de validación concretos necesarios para garantizar que sus defensas realmente detengan estos ataques antes de que se conviertan en brechas.", "items": [{"cve_id": "CVE-2026-110447", "narrative": "El CODE Server integrado de Collabora Online presenta una vulnerabilidad de inyección de comandos del sistema operativo, lo que permite a los atacantes ejecutar comandos arbitrarios en el sistema host. Esta vulnerabilidad ocupa el primer lugar debido a su explotación activa en el mundo real, confirmada por la inclusión en el KEV de CISA el 2026-10-23, y una probabilidad EPSS alta del 12.3%. La exposición principal reside en los entornos de edición colaborativa donde la entrada no confiable podría llegar al servidor, permitiendo la comprometer el sistema completo. Desde la perspectiva de CTEM, debe validar continuamente si su firewall de aplicación web y los controles de punto final interceptan realmente estos intentos de inyección, en lugar de suponer que el parche es suficiente. Si la validación falla, movilícese empujando reglas de detección específicas para anomalías de ejecución de comandos a su SIEM y asignando un responsable para remediar la sanitización de entrada subyacente. Esto garantiza que, incluso si la vulnerabilidad persiste, la cadena de ataque se rompa en la capa de red o punto final, impidiendo el movimiento lateral.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447"}, {"cve_id": "CVE-2026-106931", "narrative": "La edición de servidor de SiteGuard de EG Secure Solutions es vulnerable a la inyección de comandos del sistema operativo, una debilidad crítica que permite a los atacantes remotos ejecutar comandos de sistema arbitrarios. Ocupa el segundo lugar porque fue añadida al catálogo KEV de CISA el 2026-10-20, con una puntuación EPSS moderada del 2.5% que indica una probabilidad realista de explotación. El riesgo es particularmente agudo para las organizaciones que utilizan este producto para transferencias de archivos seguras, donde una única carga maliciosa podría otorgar a los atacantes acceso a nivel de root. La validación continua es esencial aquí; debe simular la carga de inyección contra sus defensas perimetrales existentes para demostrar que bloquean la explotación. Si la simulación revela una brecha, movilícese desplegando automáticamente reglas de mitigación en su puerta de enlace web y verificando que las herramientas de detección de punto final marquen la ejecución de procesos resultante. Este enfoque garantiza que su postura de seguridad sea probada como efectiva, no solo supuesta como conforme, reduciendo así la ventana de exposición para esta vulnerabilidad activamente objetivo.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931"}, {"cve_id": "CVE-2026-96654", "narrative": "Plex Media Server se ve afectado por la neutralización inadecuada de esquemas URI codificados, lo que puede provocar scripts entre sitios (cross-site scripting) u otros ataques del lado del cliente cuando se procesan enlaces maliciosos. Esta vulnerabilidad ocupa el tercer puesto debido a su inclusión en el catálogo KEV de CISA el 2026-10-20, con una probabilidad EPSS del 1.9%. La exposición es significativa para cualquier usuario que ejecute Plex en una red doméstica o de pequeña empresa, donde un enlace elaborado podría comprometer el servidor o las sesiones de usuario. Para abordarlo, la validación continua debe centrarse en probar si los controles web sanitizan correctamente estos esquemas codificados antes de que lleguen a la aplicación. Si la validación muestra que los URI maliciosos pasan a través, se debe actuar actualizando las reglas del cortafuegos de la aplicación web para bloquear patrones de URI específicos y asegurando que las protecciones de punto final detecten cualquier ejecución de script posterior. Esta validación proactiva garantiza que las defensas sean robustas frente a los trucos de codificación específicos que los atacantes están utilizando actualmente, en lugar de depender de una configuración estática que podría haberse desviado.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654"}, {"cve_id": "CVE-2026-96652", "narrative": "Plex Media Server contiene una vulnerabilidad de suplantación de solicitud del lado del servidor (SSRF), que permite a los atacantes forzar al servidor a realizar solicitudes a ubicaciones no deseadas. Ocupa el cuarto puesto porque fue añadida a la KEV de CISA el 2026-10-20, con una puntuación EPSS del 1.8%. Este defecto es peligroso porque puede utilizarse para sondear redes internas o acceder a servicios de metadatos en la nube, lo que podría conducir al robo de credenciales. El escenario de ataque realista implica que un atacante envía una solicitud elaborada que engaña al servidor de Plex para que acceda a recursos internos sensibles. La validación continua debe probar si la segmentación de red y el filtrado de salidas impiden realmente que el servidor alcance estos objetivos internos. Si la simulación revela que las llamadas de retorno de SSRF son posibles, se debe actuar endureciendo las reglas del cortafuegos para bloquear las solicitudes salientes del servicio de Plex y desplegando lógica de detección para alertar sobre patrones de tráfico interno inusuales. Esto garantiza que, incluso si existe el defecto de la aplicación, los controles de red contengan eficazmente el radio de impacto.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652"}, {"cve_id": "CVE-2026-96656", "narrative": "Plex Media Server es vulnerable al control externo de nombres o rutas de archivo, lo que puede permitir a los atacantes escribir archivos en ubicaciones arbitrarias del sistema. Ocupa el quinto puesto debido a su estado KEV añadido el 2026-10-20 y una probabilidad EPSS del 1.8%. El riesgo es alto para cualquier despliegue donde el servidor tenga permisos de escritura en directorios sensibles, ya que esto podría conducir a la ejecución remota de código o a la manipulación de datos. Los atacantes podrían explotar esto manipulando los parámetros de carga de archivos para colocar scripts maliciosos en directorios accesibles por la web. La validación continua debe simular esta manipulación de rutas de archivo para verificar que la supervisión de integridad de archivos y los controles de acceso impiden escrituras no autorizadas. Si la validación falla, se debe actuar restringiendo los permisos del sistema de archivos de la cuenta de servicio de Plex y desplegando reglas de detección que alerten sobre la creación inesperada de archivos en directorios críticos. Este enfoque garantiza que los controles se prueben activamente contra las técnicas específicas de manipulación de archivos utilizadas en el mundo real, proporcionando una capa de defensa fiable.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656"}, {"cve_id": "CVE-2026-96655", "narrative": "Otra vulnerabilidad de falsificación de solicitud del lado del servidor (SSRF) en Plex Media Server permite a los atacantes eludir los controles de acceso previstos e interactuar con servicios internos. Ocupa el sexto puesto porque fue añadida al catálogo KEV de CISA el 2026-10-20, con una puntuación EPSS del 1,6 %. Este defecto es particularmente preocupante en entornos alojados en la nube, donde el SSRF puede utilizarse para robar credenciales temporales de los puntos de finalización de metadatos. El escenario de ataque implica que un atacante crea una solicitud que provoca que el servidor de Plex obtenga datos sensibles de una dirección IP interna. La validación continua debe probar si sus políticas de red bloquean eficazmente que el servidor de Plex acceda a estos servicios de metadatos internos. Si la simulación muestra que la solicitud tiene éxito, movilícese implementando un filtrado de salida estricto y desplegando lógica de detección para supervisar las solicitudes internas anómalas que se originan en el servicio de Plex. Esto garantiza que sus controles de red se demuestren capaces de detener los ataques SSRF, en lugar de depender del manejo interno de solicitudes de la aplicación.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655"}, {"cve_id": "CVE-2026-114625", "narrative": "Arista VeloCloud Orchestrator es vulnerable a la inyección SQL, lo que puede permitir a los atacantes manipular consultas de base de datos y obtener potencialmente acceso no autorizado a datos sensibles. Ocupa el séptimo puesto debido a su inclusión en el KEV de CISA el 2026-10-23, con una probabilidad EPSS del 1,0 %. La exposición es significativa para los operadores de red que utilizan VeloCloud, ya que una inyección exitosa podría comprometer la integridad de los datos de configuración de red. Los atacantes podrían explotar esto inyectando comandos SQL maliciosos a través de los campos de entrada en la interfaz web del orquestador. La validación continua debe probar si su cortafuegos de base de datos y los controles a nivel de aplicación neutralizan eficazmente estos intentos de inyección. Si la validación revela que se ejecutan consultas maliciosas, movilícese desplegando la aplicación de consultas parametrizadas y actualizando su SIEM para detectar patrones de inyección SQL en los registros de la base de datos. Esto garantiza que sus defensas se validen activamente contra las técnicas específicas de inyección SQL que se están utilizando, proporcionando una capa de protección robusta para su infraestructura de red.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625"}, {"cve_id": "CVE-2026-110936", "narrative": "Siemens Software Center está afectado por una vulnerabilidad de elemento de ruta de búsqueda no controlada, que puede permitir a los atacantes ejecutar código arbitrario colocando archivos maliciosos en la ruta de búsqueda de la aplicación. Se clasifica en el octavo puesto porque fue añadido al KEV de CISA el 2026-10-20, con una puntuación EPSS del 1,0 %. Esta falla es particularmente peligrosa en entornos industriales donde el software de Siemens se utiliza para gestionar activos críticos, ya que podría conducir a una comprometer total del sistema. El escenario de ataque implica que un atacante coloca una DLL o un ejecutable malicioso en un directorio que el Software Center busca para las bibliotecas. La validación continua debe probar si sus controles de punto final y la supervisión de integridad de archivos impiden la ejecución de estos binarios no confiables. Si la simulación muestra que el archivo malicioso se ejecuta, debe movilizarse restringiendo la ruta de búsqueda a directorios confiables y desplegando reglas de detección que alerten sobre la creación de procesos inesperados desde el Software Center. Esto garantiza que sus controles estén probados para detener este tipo específico de ejecución de código, protegiendo sus operaciones industriales de posibles interrupciones.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936"}]}, "editorial": {"headline": "Deje de adivinar si sus controles funcionan; comience a demostrar que no fallan.", "editorial": "Let’s be honest: the threat landscape isn’t just noisy; it’s actively hostile. Today’s ranked findings tell a clear story. We have eight vulnerabilities under active exploitation, all sitting in the CISA KEV catalog. The headline grabber is CVE-2026-110447, an OS command injection in Collabora Online with a 12% EPSS score. That’s not a theoretical risk; it’s a live fire drill. But don’t just look at the top item. The cluster of Plex Media Server flaws (CVE-2026-96654, -96652, -96656, -96655) and the Arista VeloCloud SQL injection (CVE-2026-114625) show that attackers are diversifying their entry points. They are hitting web interfaces, internal orchestrators, and media servers simultaneously. \n\nHere is the view: if you are relying on patching alone, you are already behind. The real question isn't \"have we patched this?\" It is \"does our detection stack actually catch this specific exploit pattern?\" We have new IOCs for Mirai and SalatStealer payloads, plus specific IOBs for SSRF callbacks and SQL injection. These are not just data points; they are test cases. \n\nYour CTEM programme must shift from passive monitoring to active validation. You need to simulate these exact exploits against your production controls. If your WAF lets a crafted URI scheme through, or if your EDR misses a command injection payload, you have a gap. Don't assume your controls are robust; prove it. If the simulation fails, mobilise immediately. Push the specific detection rules to your SIEM, assign an owner to the remediation, and capture the evidence for your next audit. It’s not about having the best tools; it’s about knowing, with certainty, that they work when the bad guys are already inside the door.", "ctem": {"continuous_validation": "Simulate the specific exploit payloads for CVE-2026-110447 and the Plex SSRF vulnerabilities against your current endpoint and web defences. Validate whether your controls detect the associated IOCs for Mirai and SalatStealer, as well as the behavioural indicators for SQL injection and command injection.", "mobilisation": "For any validation failure, automatically push updated detection rules to your SIEM and EDR platforms. Assign remediation owners to patch the affected systems and generate framework-mapped evidence to demonstrate compliance and closure."}}, "top10": [{"cve_id": "CVE-2026-110447", "name": "Collabora Online – Vulnerabilidad de inyección de comandos del sistema en el servidor CODE integrado", "vendor": "Collabora", "product": "Collabora Online – Built-in CODE Server", "kev": true, "kev_date_added": "2026-10-23", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447", "epss": 0.12328, "priority_rank": 1, "priority_reason": "exploited in the wild (KEV, added 2026-10-23); EPSS 12%", "recently_covered": true, "cwe": ["CWE-78"], "narrative": "El CODE Server integrado de Collabora Online presenta una vulnerabilidad de inyección de comandos del sistema operativo, lo que permite a los atacantes ejecutar comandos arbitrarios en el sistema host. Esta vulnerabilidad ocupa el primer lugar debido a su explotación activa en el mundo real, confirmada por la inclusión en el KEV de CISA el 2026-10-23, y una probabilidad EPSS alta del 12.3%. La exposición principal reside en los entornos de edición colaborativa donde la entrada no confiable podría llegar al servidor, permitiendo la comprometer el sistema completo. Desde la perspectiva de CTEM, debe validar continuamente si su firewall de aplicación web y los controles de punto final interceptan realmente estos intentos de inyección, en lugar de suponer que el parche es suficiente. Si la validación falla, movilícese empujando reglas de detección específicas para anomalías de ejecución de comandos a su SIEM y asignando un responsable para remediar la sanitización de entrada subyacente. Esto garantiza que, incluso si la vulnerabilidad persiste, la cadena de ataque se rompa en la capa de red o punto final, impidiendo el movimiento lateral."}, {"cve_id": "CVE-2026-106931", "name": "Vulnerabilidad de inyección de comandos del sistema operativo en la edición de servidor de SiteGuard de EG Secure Solutions", "vendor": "EG Secure Solutions", "product": "SiteGuard Server Edition", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931", "epss": 0.02528, "priority_rank": 2, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 3%", "recently_covered": true, "cwe": ["CWE-78"], "narrative": "La edición de servidor de SiteGuard de EG Secure Solutions es vulnerable a la inyección de comandos del sistema operativo, una debilidad crítica que permite a los atacantes remotos ejecutar comandos de sistema arbitrarios. Ocupa el segundo lugar porque fue añadida al catálogo KEV de CISA el 2026-10-20, con una puntuación EPSS moderada del 2.5% que indica una probabilidad realista de explotación. El riesgo es particularmente agudo para las organizaciones que utilizan este producto para transferencias de archivos seguras, donde una única carga maliciosa podría otorgar a los atacantes acceso a nivel de root. La validación continua es esencial aquí; debe simular la carga de inyección contra sus defensas perimetrales existentes para demostrar que bloquean la explotación. Si la simulación revela una brecha, movilícese desplegando automáticamente reglas de mitigación en su puerta de enlace web y verificando que las herramientas de detección de punto final marquen la ejecución de procesos resultante. Este enfoque garantiza que su postura de seguridad sea probada como efectiva, no solo supuesta como conforme, reduciendo así la ventana de exposición para esta vulnerabilidad activamente objetivo."}, {"cve_id": "CVE-2026-96654", "name": "Vulnerabilidad de neutralización inadecuada de esquemas URI codificados en una página web en Plex Media Server", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654", "epss": 0.01949, "priority_rank": 3, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-84"], "narrative": "Plex Media Server se ve afectado por la neutralización inadecuada de esquemas URI codificados, lo que puede provocar scripts entre sitios (cross-site scripting) u otros ataques del lado del cliente cuando se procesan enlaces maliciosos. Esta vulnerabilidad ocupa el tercer puesto debido a su inclusión en el catálogo KEV de CISA el 2026-10-20, con una probabilidad EPSS del 1.9%. La exposición es significativa para cualquier usuario que ejecute Plex en una red doméstica o de pequeña empresa, donde un enlace elaborado podría comprometer el servidor o las sesiones de usuario. Para abordarlo, la validación continua debe centrarse en probar si los controles web sanitizan correctamente estos esquemas codificados antes de que lleguen a la aplicación. Si la validación muestra que los URI maliciosos pasan a través, se debe actuar actualizando las reglas del cortafuegos de la aplicación web para bloquear patrones de URI específicos y asegurando que las protecciones de punto final detecten cualquier ejecución de script posterior. Esta validación proactiva garantiza que las defensas sean robustas frente a los trucos de codificación específicos que los atacantes están utilizando actualmente, en lugar de depender de una configuración estática que podría haberse desviado."}, {"cve_id": "CVE-2026-96652", "name": "Vulnerabilidad de suplantación de solicitud del lado del servidor (SSRF) en Plex Media Server", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652", "epss": 0.01821, "priority_rank": 4, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-918"], "narrative": "Plex Media Server contiene una vulnerabilidad de suplantación de solicitud del lado del servidor (SSRF), que permite a los atacantes forzar al servidor a realizar solicitudes a ubicaciones no deseadas. Ocupa el cuarto puesto porque fue añadida a la KEV de CISA el 2026-10-20, con una puntuación EPSS del 1.8%. Este defecto es peligroso porque puede utilizarse para sondear redes internas o acceder a servicios de metadatos en la nube, lo que podría conducir al robo de credenciales. El escenario de ataque realista implica que un atacante envía una solicitud elaborada que engaña al servidor de Plex para que acceda a recursos internos sensibles. La validación continua debe probar si la segmentación de red y el filtrado de salidas impiden realmente que el servidor alcance estos objetivos internos. Si la simulación revela que las llamadas de retorno de SSRF son posibles, se debe actuar endureciendo las reglas del cortafuegos para bloquear las solicitudes salientes del servicio de Plex y desplegando lógica de detección para alertar sobre patrones de tráfico interno inusuales. Esto garantiza que, incluso si existe el defecto de la aplicación, los controles de red contengan eficazmente el radio de impacto."}, {"cve_id": "CVE-2026-96656", "name": "Vulnerabilidad de control externo del nombre o ruta de archivo en Plex Media Server", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656", "epss": 0.01785, "priority_rank": 5, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-73"], "narrative": "Plex Media Server es vulnerable al control externo de nombres o rutas de archivo, lo que puede permitir a los atacantes escribir archivos en ubicaciones arbitrarias del sistema. Ocupa el quinto puesto debido a su estado KEV añadido el 2026-10-20 y una probabilidad EPSS del 1.8%. El riesgo es alto para cualquier despliegue donde el servidor tenga permisos de escritura en directorios sensibles, ya que esto podría conducir a la ejecución remota de código o a la manipulación de datos. Los atacantes podrían explotar esto manipulando los parámetros de carga de archivos para colocar scripts maliciosos en directorios accesibles por la web. La validación continua debe simular esta manipulación de rutas de archivo para verificar que la supervisión de integridad de archivos y los controles de acceso impiden escrituras no autorizadas. Si la validación falla, se debe actuar restringiendo los permisos del sistema de archivos de la cuenta de servicio de Plex y desplegando reglas de detección que alerten sobre la creación inesperada de archivos en directorios críticos. Este enfoque garantiza que los controles se prueben activamente contra las técnicas específicas de manipulación de archivos utilizadas en el mundo real, proporcionando una capa de defensa fiable."}, {"cve_id": "CVE-2026-96655", "name": "Vulnerabilidad de suplantación de solicitud del lado del servidor (SSRF) en Plex Media Server", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655", "epss": 0.01637, "priority_rank": 6, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-918"], "narrative": "Otra vulnerabilidad de falsificación de solicitud del lado del servidor (SSRF) en Plex Media Server permite a los atacantes eludir los controles de acceso previstos e interactuar con servicios internos. Ocupa el sexto puesto porque fue añadida al catálogo KEV de CISA el 2026-10-20, con una puntuación EPSS del 1,6 %. Este defecto es particularmente preocupante en entornos alojados en la nube, donde el SSRF puede utilizarse para robar credenciales temporales de los puntos de finalización de metadatos. El escenario de ataque implica que un atacante crea una solicitud que provoca que el servidor de Plex obtenga datos sensibles de una dirección IP interna. La validación continua debe probar si sus políticas de red bloquean eficazmente que el servidor de Plex acceda a estos servicios de metadatos internos. Si la simulación muestra que la solicitud tiene éxito, movilícese implementando un filtrado de salida estricto y desplegando lógica de detección para supervisar las solicitudes internas anómalas que se originan en el servicio de Plex. Esto garantiza que sus controles de red se demuestren capaces de detener los ataques SSRF, en lugar de depender del manejo interno de solicitudes de la aplicación."}, {"cve_id": "CVE-2026-114625", "name": "Vulnerabilidad de inyección SQL en Arista VeloCloud Orchestrator", "vendor": "Arista", "product": "VeloCloud Orchestrator", "kev": true, "kev_date_added": "2026-10-23", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625", "epss": 0.01025, "priority_rank": 7, "priority_reason": "exploited in the wild (KEV, added 2026-10-23); EPSS 1%", "recently_covered": true, "cwe": ["CWE-89"], "narrative": "Arista VeloCloud Orchestrator es vulnerable a la inyección SQL, lo que puede permitir a los atacantes manipular consultas de base de datos y obtener potencialmente acceso no autorizado a datos sensibles. Ocupa el séptimo puesto debido a su inclusión en el KEV de CISA el 2026-10-23, con una probabilidad EPSS del 1,0 %. La exposición es significativa para los operadores de red que utilizan VeloCloud, ya que una inyección exitosa podría comprometer la integridad de los datos de configuración de red. Los atacantes podrían explotar esto inyectando comandos SQL maliciosos a través de los campos de entrada en la interfaz web del orquestador. La validación continua debe probar si su cortafuegos de base de datos y los controles a nivel de aplicación neutralizan eficazmente estos intentos de inyección. Si la validación revela que se ejecutan consultas maliciosas, movilícese desplegando la aplicación de consultas parametrizadas y actualizando su SIEM para detectar patrones de inyección SQL en los registros de la base de datos. Esto garantiza que sus defensas se validen activamente contra las técnicas específicas de inyección SQL que se están utilizando, proporcionando una capa de protección robusta para su infraestructura de red."}, {"cve_id": "CVE-2026-110936", "name": "Vulnerabilidad de elemento de ruta de búsqueda no controlada en Siemens Software Center", "vendor": "Siemens", "product": "Software Center", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936", "epss": 0.00967, "priority_rank": 8, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 1%", "recently_covered": true, "cwe": ["CWE-427"], "narrative": "Siemens Software Center está afectado por una vulnerabilidad de elemento de ruta de búsqueda no controlada, que puede permitir a los atacantes ejecutar código arbitrario colocando archivos maliciosos en la ruta de búsqueda de la aplicación. Se clasifica en el octavo puesto porque fue añadido al KEV de CISA el 2026-10-20, con una puntuación EPSS del 1,0 %. Esta falla es particularmente peligrosa en entornos industriales donde el software de Siemens se utiliza para gestionar activos críticos, ya que podría conducir a una comprometer total del sistema. El escenario de ataque implica que un atacante coloca una DLL o un ejecutable malicioso en un directorio que el Software Center busca para las bibliotecas. La validación continua debe probar si sus controles de punto final y la supervisión de integridad de archivos impiden la ejecución de estos binarios no confiables. Si la simulación muestra que el archivo malicioso se ejecuta, debe movilizarse restringiendo la ruta de búsqueda a directorios confiables y desplegando reglas de detección que alerten sobre la creación de procesos inesperados desde el Software Center. Esto garantiza que sus controles estén probados para detener este tipo específico de ejecución de código, protegiendo sus operaciones industriales de posibles interrupciones."}], "advisories": [{"source": "CISA (US)", "title": "CISA añade una vulnerabilidad explotada conocida al catálogo", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog-0", "published": "Fri, 23 Oct 26 12:00:00 +0000", "summary": "<p>CISA ha añadido una nueva vulnerabilidad a su&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Catálogo de Vulnerabilidades Explotadas Conocidas (KEV)</a>, basándose en evidencia de explotación activa.</p>\n<ul type="disc">\n<li><a class="Hyperlink SCXW162250516 BCX8" href="https://www.cve.org/CVERecord?id=CVE-2026-110447" target="_blank" rel="noreferrer noopener"><u>CVE-2026-110447</u></a> Collabora Online – Vulnerabilidad de inyección de comandos del sistema operativo en el servidor CODE integrado&nbsp;</li>\n</ul>\n<p>Este tipo de vulnerabilidad es un vector de ataque frecuente para actores cibernéticos maliciosos y supone riesgos significativos para el sector federal.</p>\n<p><a href="https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk">Directiva Operativa Vinculante (BOD) 26-04: Priorización de actualizaciones de seguridad basadas en el riesgo</a> establece los requisitos de gestión de vulnerabilidades para las agencias del Ramo Ejecutivo Civil Federal (FCEB). La BOD 26-04 refuerza la importancia del Catálogo KEV y exige a las agencias federales que prioricen la remediación rápida de vulnerabilidades de alto riesgo, específicamente aquellas identificadas por Vulnerabilidades y Exposiciones Comunes (CVE) enumeradas en el Catálogo KEV de CISA en activos expuestos públicamente que otorgan el control total del activo tras la explotación, mientras se difiere la acción para vulnerabilidades de menor riesgo. La BOD 26-04 establece además expectativas básicas sobre cuándo las agencias deben verificar si los actores de amenaza comprometieron el sistema antes de que se aplicara la parche.</p>\n<p>Si bien la BOD 26-04 solo se aplica a las agencias FCEB, CISA anima a todas las organizaciones a adoptar la gestión de vulnerabilidades basada en el riesgo y a priorizar la remediación de&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">vulnerabilidades del Catálogo KEV</a>. CISA continuará añadiendo vulnerabilidades al catálogo que cumplan los&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities">criterios especificados</a>.</p>\n<p>¿Está al tanto de una vulnerabilidad explotada que no esté actualmente enumerada en el Catálogo KEV? Envíela para su posible inclusión mediante el&nbsp;<a href="https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w" target="_blank">Formulario de Nombramiento KEV</a> de CISA. Las posibles adiciones al KEV deben tener un ID de CVE, evidencia de explotación y una guía de mitigación clara.</p>"}, {"source": "CISA (US)", "title": "CISA añade una vulnerabilidad explotada conocida al catálogo", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog", "published": "Fri, 23 Oct 26 12:00:00 +0000", "summary": "<p>CISA ha añadido una nueva vulnerabilidad a su&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Catálogo de Vulnerabilidades Explotadas Conocidas (KEV)</a>, basándose en evidencia de explotación activa.</p>\n<ul type="disc">\n<li><a href="https://www.cve.org/CVERecord?id=CVE-2026-114625" target="_blank">CVE-2026-114625</a> Vulnerabilidad de inyección SQL en Arista VeloCloud Orchestrator</li>\n</ul>\n<p>Este tipo de vulnerabilidad es un vector de ataque frecuente para actores cibernéticos maliciosos y supone riesgos significativos para el sector federal.</p>\n<p>La <a href="https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk">Directiva Operativa Vinculante (BOD) 26-04: Priorización de Actualizaciones de Seguridad Basada en el Riesgo</a> establece los requisitos de gestión de vulnerabilidades para las agencias del Ramo Ejecutivo Civil Federal (FCEB). La BOD 26-04 refuerza la importancia del Catálogo KEV y exige a las agencias federales que prioricen la remediación rápida de vulnerabilidades de alto riesgo, específicamente aquellas identificadas por Vulnerabilidades y Exposiciones Comunes (CVE) listadas en el Catálogo KEV de CISA en activos expuestos públicamente que otorgan control total del activo tras la explotación, mientras se difiere la acción para vulnerabilidades de menor riesgo. La BOD 26-04 establece además expectativas básicas sobre cuándo las agencias deben verificar si los actores de amenaza comprometieron el sistema antes de que se aplicara el parche.</p>\n<p>Si bien la BOD 26-04 solo se aplica a las agencias FCEB, CISA anima a todas las organizaciones a adoptar la gestión de vulnerabilidades basada en el riesgo y a priorizar la remediación de las <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">vulnerabilidades del Catálogo KEV</a>. CISA continuará añadiendo vulnerabilidades al catálogo que cumplan los <a href="https://www.cisa.gov/known-exploited-vulnerabilities">criterios especificados</a>.</p>\n<p>¿Está al tanto de una vulnerabilidad explotada que no figure actualmente en el Catálogo KEV? Envíela para su posible inclusión mediante el <a href="https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w" target="_blank">Formulario de Nombramiento KEV</a> de CISA. Las posibles adiciones al KEV deben tener un ID de CVE, evidencia de explotación y una guía de mitigación clara.</p>"}, {"source": "CISA (US)", "title": "API del servidor web de Siemens SIMATIC S7", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-10.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens SIMATIC S7 Webserver API are affected:</p>\n<ul>\n<li>.NET Client Library for SIMATIC S7 Webserver API vers:intdot/&lt;3.3.61, vers:intdot/&lt;3.3.62 (CVE-2026-85114, CVE-2026-85115)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7.5</td>\n<td>Siemens</td>\n<td>.NET Client Library for SIMATIC S7 Webserver API</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">2 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Generation of Error Message Containing Sensitive Information</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-85114</div>\n<div class="c-expandable-textbox__body">Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.61</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.3.61 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/22.html">CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-85114">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-85115</div>\n<div class="c-expandable-textbox__body">Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.61</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.62</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.3.62 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/209.html">CWE-209 Generation of Error Message Containing Sensitive Information</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.5</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-85115">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-390352 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-390352 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Productos Siemens APOGEE, TALON y Desigo PXC/PXM", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-08.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens APOGEE, TALON and Desigo PXC/PXM Products are affected:</p>\n<ul>\n<li>APOGEE MBC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MBC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MEC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MEC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Compact (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Compact (P2 Ethernet) vers:intdot/&lt;2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Modular (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Modular (P2 Ethernet) vers:intdot/&lt;2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>Desigo PXC00-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC00-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC001-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC100-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC12-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC128-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC200-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC22-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC22.1-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC36.1-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC50-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC64-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXM20-E vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>TALON TC Compact (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>TALON TC Modular (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.2</td>\n<td>Siemens</td>\n<td>APOGEE MBC (PPC) (BACnet)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">3 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Read, Integer Underflow (Wrap or Wraparound), Stack-based Buffer Overflow</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89208</div>\n<div class="c-expandable-textbox__body">The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>13 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89208">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102073</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>23 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/191.html">CWE-191 Integer Underflow (Wrap or Wraparound)</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.2</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102073">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102074</div>\n<div class="c-expandable-textbox__body">The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>33 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102074">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102075</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>43 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102075">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102076</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>53 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102076">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-333035 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-333035 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens RUGGEDCOM CROSSBOW", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-12.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM CROSSBOW are affected:</p>\n<ul>\n<li>RUGGEDCOM CROSSBOW vers:intdot/&lt;6.0 (CVE-2026-89196, CVE-2026-89197, CVE-2026-89198, CVE-2026-89199, CVE-2026-89200, CVE-2026-89201, CVE-2026-89202, CVE-2026-89203, CVE-2026-89204, CVE-2026-89205, CVE-2026-89206)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.8</td>\n<td>Siemens</td>\n<td>RUGGEDCOM CROSSBOW</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Authorization Bypass Through User-Controlled Key, Insertion of Sensitive Information Into Sent Data, Client-Side Enforcement of Server-Side Security</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89196</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89196">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89197</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89197">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89198</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89198">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89199</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89199">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89200</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.7</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89200">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89201</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>6 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89201">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89202</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>7 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.5</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89202">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89203</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>8 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/201.html">CWE-201 Insertion of Sensitive Information Into Sent Data</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>4.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89203">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89204</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>9 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.4</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89204">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89205</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>10 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/602.html">CWE-602 Client-Side Enforcement of Server-Side Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89205">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89206</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>11 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/602.html">CWE-602 Client-Side Enforcement of Server-Side Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89206">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-508506 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-508506 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Dispositivos Siemens RUGGEDCOM APE1808", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-18.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM APE1808 Devices are affected:</p>\n<ul>\n<li>RUGGEDCOM APE1808 vers:all/* (CVE-2026-33387, CVE-2026-33388, CVE-2026-33389, CVE-2026-33391, CVE-2026-33920)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7.5</td>\n<td>Siemens</td>\n<td>RUGGEDCOM APE1808</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Neutralization of Special Elements Used in a Template Engine, Incorrect Authorization, Lack of Administrator Control over Security, Cross-Site Request Forgery (CSRF)</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33387</div>\n<div class="c-expandable-textbox__body">A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a malicious dashboard. When the victim views or imports the dashboard, the payload executes in their browser context, allowing the attacker to modify application data or disrupt application availability.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/1336.html">CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>4.6</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33387">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33388</div>\n<div class="c-expandable-textbox__body">An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who deletes or edits an entry can disrupt authentication for dependent devices, and one who manipulates an entry's configuration may be able to indirectly obtain the credentials.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/863.html">CWE-863 Incorrect Authorization</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.4</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33388">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33389</div>\n<div class="c-expandable-textbox__body">An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned between a sensor and a polled device can, during a polling session, impersonate the device and intercept the communication, including the credentials used to access it. The captured credentials can then be replayed to authenticate against the device itself or against other devices sharing the same credentials, allowing the attacker to access and tamper with the device's data and to disrupt its operations.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/671.html">CWE-671 Lack of Administrator Control over Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33389">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33391</div>\n<div class="c-expandable-textbox__body">An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart Polling discovery configuration. This allows the attacker to disrupt the visibility of assets in the monitored network.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/863.html">CWE-863 Incorrect Authorization</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.4</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33391">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33920</div>\n<div class="c-expandable-textbox__body">A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performed by the victim in this state is attributed to the attacker's account, compromising the integrity of the audit trail.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/352.html">CWE-352 Cross-Site Request Forgery (CSRF)</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>3.5</td>\n<td>LOW</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33920">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-911336 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-911336 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Industrial Edge App Publisher", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-02.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on the local machine through Node.js integration. Siemens has released an update for the Industrial Edge App Publisher and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens Industrial Edge App Publisher are affected:</p>\n<ul>\n<li>Industrial Edge App Publisher vers:intdot/&lt;1.27.9 (CVE-2026-78556, CVE-2026-78557)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.3</td>\n<td>Siemens</td>\n<td>Industrial Edge App Publisher</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">2 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Certificate Validation, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-78556</div>\n<div class="c-expandable-textbox__body">The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended server.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/295.html">CWE-295 Improper Certificate Validation</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.4</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-78556">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-78557</div>\n<div class="c-expandable-textbox__body">The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/79.html">CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.3</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-78557">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-968435 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-968435 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "CPU 1518(F)-4 PN/DP MFP de Siemens SIMATIC S7-1500", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-11_test.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP are affected:</p>\n<ul>\n<li>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/&gt;=3.1.7</li>\n<li>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 10</td>\n<td>Siemens</td>\n<td>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">428 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Access of Resource Using Incompatible Type ('Type Confusion'), Access of Uninitialized Pointer, Active Debug Code, Buffer Access with Incorrect Length Value, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Buffer Underwrite ('Buffer Underflow'), Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), Deadlock, Divide By Zero, Expired Pointer Dereference, Exposure of Sensitive Information Due to Incompatible Policies, Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution, Improper Enforcement of Behavioral Workflow, Improper Following of Specification by Caller, Improper Handling of Invalid Use of Special Elements, Improper Handling of Length Parameter Inconsistency, Improper Handling of Missing Special Element, Improper Handling of Structural Elements, Improper Input Validation, Improper Locking, Improper Neutralization of Null Byte or NUL Character, Improper Null Termination, Improper Privilege Management, Improper Resource Locking, Improper Resource Shutdown or Release, Improper Update of Reference Count, Improper Validation of Specified Index, Position, or Offset in Input, Improper Validation of Specified Quantity in Input, Improper Validation of Specified Type of Input, Improperly Implemented Security Check for Standard, Incomplete Cleanup, Incomplete Internal State Distinction, Incorrect Calculation of Buffer Size, Incorrect Conversion between Numeric Types, Incorrect Privilege Assignment, Incorrect Synchronization, Incorrect Type Conversion or Cast, Integer Overflow or Wraparound, Loop with Unreachable Exit Condition ('Infinite Loop'), Memory Allocation with Excessive Size Value, Misinterpretation of Input, Missing Critical Step in Authentication, Missing Default Case in Multiple Condition Expression, Missing Encryption of Sensitive Data, Missing Initialization of Resource, Missing Release of Memory after Effective Lifetime, Missing Release of Resource after Effective Lifetime, Missing Report of Error Condition, Missing Synchronization, Multiple Releases of Same Resource or Handle, NULL Pointer Dereference, Operation on a Resource after Expiration or Release, Out-of-bounds Read, Out-of-bounds Write, Plaintext Storage of a Password, Race Condition within a Thread, Reachable Assertion, Release of Invalid Pointer or Reference, Signal Handler Race Condition, Time-of-check Time-of-use (TOCTOU) Race Condition, Transmission of Private Resources into a New Sphere ('Resource Leak'), Trust of System Event Data, Unchecked Return Value, Uncontrolled Recursion, Untrusted Pointer Dereference, Use After Free, Use of Externally-Controlled Format String, Use of Uninitialized Resource, Use of Uninitialized Variable, Write-what-where Condition</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2021-41617</div>\n<div class="c-expandable-textbox__body">sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/311.html">CWE-311 Missing Encryption of Sensitive Data</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2021-41617">View CVE Details</a></p>\n</div>\n</div>\n<ul type="disc">\n<li>CVE-2021-41617</li>\n<li>CVE-2023-28531</li>\n<li>CVE-2023-51384</li>\n<li>CVE-2023-52927</li>\n<li>CVE-2023-53292</li>\n<li>CVE-2024-26783</li>\n<li>CVE-2024-27056</li>\n<li>CVE-2024-28956</li>\n<li>CVE-2024-36903</li>\n<li>CVE-2024-36927</li>\n<li>CVE-2024-42079</li>\n<li>CVE-2024-46786</li>\n<li>CVE-2024-47736</li>\n<li>CVE-2024-47809</li>\n<li>CVE-2024-49968</li>\n<li>CVE-2024-49994</li>\n<li>CVE-2024-49998</li>\n<li>CVE-2024-50014</li>\n<li>CVE-2024-50063</li>\n<li>CVE-2024-50164</li>\n<li>CVE-2024-50298</li>\n<li>CVE-2024-53124</li>\n<li>CVE-2024-53170</li>\n<li>CVE-2024-54458</li>\n<li>CVE-2024-56631</li>\n<li>CVE-2024-56703</li>\n<li>CVE-2024-56719</li>\n<li>CVE-2024-57917</li>\n<li>CVE-2024-57924</li>\n<li>CVE-2024-57973</li>\n<li>CVE-2024-57977</li>\n<li>CVE-2024-57979</li>\n<li>CVE-2024-58011</li>\n<li>CVE-2024-58016</li>\n<li>CVE-2024-58020</li>\n<li>CVE-2024-58056</li>\n<li>CVE-2024-58058</li>\n<li>CVE-2024-58061</li>\n<li>CVE-2024-58086</li>\n<li>CVE-2025-21645</li>\n<li>CVE-2025-21648</li>\n<li>CVE-2025-21655</li>\n<li>CVE-2025-21676</li>\n<li>CVE-2025-21682</li>\n<li>CVE-2025-21702</li>\n<li>CVE-2025-21705</li>\n<li>CVE-2025-21706</li>\n<li>CVE-2025-21707</li>\n<li>CVE-2025-21718</li>\n<li>CVE-2025-21731</li>\n<li>CVE-2025-21745</li>\n<li>CVE-2025-21758</li>\n<li>CVE-2025-21760</li>\n<li>CVE-2025-21764</li>\n<li>CVE-2025-21765</li>\n<li>CVE-2025-21780</li>\n<li>CVE-2025-21795</li>\n<li>CVE-2025-21796</li>\n<li>CVE-2025-21802</li>\n<li>CVE-2025-21814</li>\n<li>CVE-2025-21846</li>\n<li>CVE-2025-21853</li>\n<li>CVE-2025-21861</li>\n<li>CVE-2025-21863</li>\n<li>CVE-2025-21864</li>\n<li>CVE-2025-21867</li>\n<li>CVE-2025-21875</li>\n<li>CVE-2025-21887</li>\n<li>CVE-2025-21913</li>\n<li>CVE-2025-21919</li>\n<li>CVE-2025-21925</li>\n<li>CVE-2025-21926</li>\n<li>CVE-2025-21938</li>\n<li>CVE-2025-21959</li>\n<li>CVE-2025-21999</li>\n<li>CVE-2025-22005</li>\n<li>CVE-2025-22015</li>\n<li>CVE-2025-22055</li>\n<li>CVE-2025-22056</li>\n<li>CVE-2025-22060</li>\n<li>CVE-2025-22083</li>\n<li>CVE-2025-22090</li>\n<li>CVE-2025-22095</li>\n<li>CVE-2025-22107</li>\n<li>CVE-2025-22111</li>\n<li>CVE-2025-22121</li>\n<li>CVE-2025-23136</li>\n<li>CVE-2025-23143</li>\n<li>CVE-2025-37785</li>\n<li>CVE-2025-37909</li>\n<li>CVE-2025-37917</li>\n<li>CVE-2025-37945</li>\n<li>CVE-2025-37959</li>\n<li>CVE-2025-37964</li>\n<li>CVE-2025-37972</li>\n<li>CVE-2025-37980</li>\n<li>CVE-2025-38125</li>\n<li>CVE-2025-38162</li>\n<li>CVE-2025-38192</li>\n<li>CVE-2025-38201</li>\n<li>CVE-2025-38232</li>\n<li>CVE-2025-38322</li>\n<li>CVE-2025-38591</li>\n<li>CVE-2025-38614</li>\n<li>CVE-2025-38681</li>\n<li>CVE-2025-38704</li>\n<li>CVE-2025-38721</li>\n<li>CVE-2025-38725</li>\n<li>CVE-2025-38727</li>\n<li>CVE-2025-38732</li>\n<li>CVE-2025-38736</li>\n<li>CVE-2025-39681</li>\n<li>CVE-2025-39691</li>\n<li>CVE-2025-39721</li>\n<li>CVE-2025-39748</li>\n<li>CVE-2025-39756</li>\n<li>CVE-2025-39764</li>\n<li>CVE-2025-39770</li>\n<li>CVE-2025-39773</li>\n<li>CVE-2025-39782</li>\n<li>CVE-2025-39795</li>\n<li>CVE-2025-39826</li>\n<li>CVE-2025-39827</li>\n<li>CVE-2025-39845</li>\n<li>CVE-2025-39866</li>\n<li>CVE-2025-39871</li>\n<li>CVE-2025-39931</li>\n<li>CVE-2025-39953</li>\n<li>CVE-2025-39955</li>\n<li>CVE-2025-39964</li>\n<li>CVE-2025-39977</li>\n<li>CVE-2025-39978</li>\n<li>CVE-2025-39980</li>\n<li>CVE-2025-40022</li>\n<li>CVE-2025-40070</li>\n<li>CVE-2025-40078</li>\n<li>CVE-2025-40080</li>\n<li>CVE-2025-40105</li>\n<li>CVE-2025-40135</li>\n<li>CVE-2025-40149</li>\n<li>CVE-2025-40196</li>\n<li>CVE-2025-40219</li>\n<li>CVE-2025-40261</li>\n<li>CVE-2025-40300</li>\n<li>CVE-2025-61984</li>\n<li>CVE-2025-61985</li>\n<li>CVE-2025-68206</li>\n<li>CVE-2025-68261</li>\n<li>CVE-2025-68264</li>\n<li>CVE-2025-68265</li>\n<li>CVE-2025-68266</li>\n<li>CVE-2025-68291</li>\n<li>CVE-2025-68337</li>\n<li>CVE-2025-68349</li>\n<li>CVE-2025-68363</li>\n<li>CVE-2025-68371</li>\n<li>CVE-2025-68724</li>\n<li>CVE-2025-68725</li>\n<li>CVE-2025-68742</li>\n<li>CVE-2025-68764</li>\n<li>CVE-2025-68773</li>\n<li>CVE-2025-68776</li>\n<li>CVE-2025-68782</li>\n<li>CVE-2025-68787</li>\n<li>CVE-2025-68788</li>\n<li>CVE-2025-68798</li>\n<li>CVE-2025-68803</li>\n<li>CVE-2025-68814</li>\n<li>CVE-2025-68816</li>\n<li>CVE-2025-68818</li>\n<li>CVE-2025-68820</li>\n<li>CVE-2025-71064</li>\n<li>CVE-2025-71075</li>\n<li>CVE-2025-71079</li>\n<li>CVE-2025-71085</li>\n<li>CVE-2025-71086</li>\n<li>CVE-2025-71088</li>\n<li>CVE-2025-71095</li>\n<li>CVE-2025-71097</li>\n<li>CVE-2025-71098</li>\n<li>CVE-2025-71104</li>\n<li>CVE-2025-71112</li>\n<li>CVE-2025-71113</li>\n<li>CVE-2025-71114</li>\n<li>CVE-2025-71120</li>\n<li>CVE-2025-71123</li>\n<li>CVE-2025-71131</li>\n<li>CVE-2025-71161</li>\n<li>CVE-2025-71162</li>\n<li>CVE-2025-71163</li>\n<li>CVE-2025-71185</li>\n<li>CVE-2025-71186</li>\n<li>CVE-2025-71189</li>\n<li>CVE-2025-71190</li>\n<li>CVE-2025-71191</li>\n<li>CVE-2025-71197</li>\n<li>CVE-2025-71221</li>\n<li>CVE-2025-71265</li>\n<li>CVE-2025-71266</li>\n<li>CVE-2025-71267</li>\n<li>CVE-2026-3497</li>\n<li>CVE-2026-22977</li>\n<li>CVE-2026-22979</li>\n<li>CVE-2026-22980</li>\n<li>CVE-2026-22982</li>\n<li>CVE-2026-22992</li>\n<li>CVE-2026-22994</li>\n<li>CVE-2026-23003</li>\n<li>CVE-2026-23005</li>\n<li>CVE-2026-23010</li>\n<li>CVE-2026-23011</li>\n<li>CVE-2026-23019</li>\n<li>CVE-2026-23026</li>\n<li>CVE-2026-23038</li>\n<li>CVE-2026-23054</li>\n<li>CVE-2026-23060</li>\n<li>CVE-2026-23083</li>\n<li>CVE-2026-23084</li>\n<li>CVE-2026-23086</li>\n<li>CVE-2026-23087</li>\n<li>CVE-2026-23095</li>\n<li>CVE-2026-23100</li>\n<li>CVE-2026-23103</li>\n<li>CVE-2026-23110</li>\n<li>CVE-2026-23111</li>\n<li>CVE-2026-23113</li>\n<li>CVE-2026-23154</li>\n<li>CVE-2026-23204</li>\n<li>CVE-2026-23231</li>\n<li>CVE-2026-23242</li>\n<li>CVE-2026-23243</li>\n<li>CVE-2026-23245</li>\n<li>CVE-2026-23255</li>\n<li>CVE-2026-23270</li>\n<li>CVE-2026-23271</li>\n<li>CVE-2026-23273</li>\n<li>CVE-2026-23274</li>\n<li>CVE-2026-23277</li>\n<li>CVE-2026-23284</li>\n<li>CVE-2026-23287</li>\n<li>CVE-2026-23290</li>\n<li>CVE-2026-23293</li>\n<li>CVE-2026-23300</li>\n<li>CVE-2026-23304</li>\n<li>CVE-2026-23319</li>\n<li>CVE-2026-23321</li>\n<li>CVE-2026-23335</li>\n<li>CVE-2026-23340</li>\n<li>CVE-2026-23343</li>\n<li>CVE-2026-23351</li>\n<li>CVE-2026-23359</li>\n<li>CVE-2026-23365</li>\n<li>CVE-2026-23368</li>\n<li>CVE-2026-23370</li>\n<li>CVE-2026-23378</li>\n<li>CVE-2026-23379</li>\n<li>CVE-2026-23381</li>\n<li>CVE-2026-23391</li>\n<li>CVE-2026-23392</li>\n<li>CVE-2026-23397</li>\n<li>CVE-2026-23398</li>\n<li>CVE-2026-23399</li>\n<li>CVE-2026-23414</li>\n<li>CVE-2026-23422</li>\n<li>CVE-2026-23434</li>\n<li>CVE-2026-23438</li>\n<li>CVE-2026-23439</li>\n<li>CVE-2026-23446</li>\n<li>CVE-2026-23449</li>\n<li>CVE-2026-23450</li>\n<li>CVE-2026-23452</li>\n<li>CVE-2026-23454</li>\n<li>CVE-2026-23455</li>\n<li>CVE-2026-23456</li>\n<li>CVE-2026-23457</li>\n<li>CVE-2026-23458</li>\n<li>CVE-2026-23463</li>\n<li>CVE-2026-23474</li>\n<li>CVE-2026-23475</li>\n<li>CVE-2026-27135</li>\n<li>CVE-2026-31389</li>\n<li>CVE-2026-31391</li>\n<li>CVE-2026-31396</li>\n<li>CVE-2026-31402</li>\n<li>CVE-2026-31403</li>\n<li>CVE-2026-31411</li>\n<li>CVE-2026-31414</li>\n<li>CVE-2026-31415</li>\n<li>CVE-2026-31416</li>\n<li>CVE-2026-31417</li>\n<li>CVE-2026-31418</li>\n<li>CVE-2026-31421</li>\n<li>CVE-2026-31422</li>\n<li>CVE-2026-31423</li>\n<li>CVE-2026-31424</li>\n<li>CVE-2026-31427</li>\n<li>CVE-2026-31428</li>\n<li>CVE-2026-31441</li>\n<li>CVE-2026-31446</li>\n<li>CVE-2026-31447</li>\n<li>CVE-2026-31448</li>\n<li>CVE-2026-31449</li>\n<li>CVE-2026-31450</li>\n<li>CVE-2026-31452</li>\n<li>CVE-2026-31466</li>\n<li>CVE-2026-31469</li>\n<li>CVE-2026-31485</li>\n<li>CVE-2026-31494</li>\n<li>CVE-2026-31495</li>\n<li>CVE-2026-31496</li>\n<li>CVE-2026-31503</li>\n<li>CVE-2026-31504</li>\n<li>CVE-2026-31507</li>\n<li>CVE-2026-31508</li>\n<li>CVE-2026-31515</li>\n<li>CVE-2026-31518</li>\n<li>CVE-2026-31521</li>\n<li>CVE-2026-31533</li>\n<li>CVE-2026-31546</li>\n<li>CVE-2026-31555</li>\n<li>CVE-2026-31563</li>\n<li>CVE-2026-31565</li>\n<li>CVE-2026-31628</li>\n<li>CVE-2026-31634</li>\n<li>CVE-2026-31649</li>\n<li>CVE-2026-31651</li>\n<li>CVE-2026-31658</li>\n<li>CVE-2026-31664</li>\n<li>CVE-2026-31665</li>\n<li>CVE-2026-31669</li>\n<li>CVE-2026-31670</li>\n<li>CVE-2026-31671</li>\n<li>CVE-2026-31674</li>\n<li>CVE-2026-31680</li>\n<li>CVE-2026-31681</li>\n<li>CVE-2026-31682</li>\n<li>CVE-2026-31700</li>\n<li>CVE-2026-31737</li>\n<li>CVE-2026-31752</li>\n<li>CVE-2026-31761</li>\n<li>CVE-2026-31768</li>\n<li>CVE-2026-40355</li>\n<li>CVE-2026-41989</li>\n<li>CVE-2026-43011</li>\n<li>CVE-2026-43024</li>\n<li>CVE-2026-43025</li>\n<li>CVE-2026-43026</li>\n<li>CVE-2026-43027</li>\n<li>CVE-2026-43028</li>\n<li>CVE-2026-43030</li>\n<li>CVE-2026-43033</li>\n<li>CVE-2026-43035</li>\n<li>CVE-2026-43038</li>\n<li>CVE-2026-43040</li>\n<li>CVE-2026-43057</li>\n<li>CVE-2026-43071</li>\n<li>CVE-2026-43085</li>\n<li>CVE-2026-43089</li>\n<li>CVE-2026-43116</li>\n<li>CVE-2026-43216</li>\n<li>CVE-2026-43303</li>\n<li>CVE-2026-43492</li>\n<li>CVE-2026-43499</li>\n<li>CVE-2026-43501</li>\n<li>CVE-2026-45841</li>\n<li>CVE-2026-46015</li>\n<li>CVE-2026-46021</li>\n<li>CVE-2026-46033</li>\n<li>CVE-2026-46037</li>\n<li>CVE-2026-46040</li>\n<li>CVE-2026-46046</li>\n<li>CVE-2026-46086</li>\n<li>CVE-2026-46101</li>\n<li>CVE-2026-46116</li>\n<li>CVE-2026-46132</li>\n<li>CVE-2026-46172</li>\n<li>CVE-2026-46173</li>\n<li>CVE-2026-46174</li>\n<li>CVE-2026-46193</li>\n<li>CVE-2026-46303</li>\n<li>CVE-2026-46306</li>\n<li>CVE-2026-46323</li>\n<li>CVE-2026-46333</li>\n<li>CVE-2026-52910</li>\n<li>CVE-2026-52912</li>\n<li>CVE-2026-52930</li>\n<li>CVE-2026-52933</li>\n<li>CVE-2026-52942</li>\n<li>CVE-2026-52943</li>\n<li>CVE-2026-52946</li>\n<li>CVE-2026-52970</li>\n<li>CVE-2026-52986</li>\n<li>CVE-2026-52998</li>\n<li>CVE-2026-52999</li>\n<li>CVE-2026-53001</li>\n<li>CVE-2026-53002</li>\n<li>CVE-2026-53006</li>\n<li>CVE-2026-53012</li>\n<li>CVE-2026-53050</li>\n<li>CVE-2026-53134</li>\n<li>CVE-2026-53218</li>\n<li>CVE-2026-53219</li>\n<li>CVE-2026-53223</li>\n<li>CVE-2026-53236</li>\n<li>CVE-2026-53239</li>\n<li>CVE-2026-53249</li>\n<li>CVE-2026-53268</li>\n<li>CVE-2026-53269</li>\n<li>CVE-2026-53275</li>\n<li>CVE-2026-53295</li>\n<li>CVE-2026-53352</li>\n<li>CVE-2026-53400</li>\n<li>CVE-2026-63810</li>\n<li>CVE-2026-64279</li>\n<li>CVE-2026-64317</li>\n<li>CVE-2026-64370</li>\n<li>CVE-2026-64371</li>\n<li>CVE-2026-64375</li>\n<li>CVE-2026-64411</li>\n<li>CVE-2026-64412</li>\n<li>CVE-2026-64413</li>\n<li>CVE-2026-64422</li>\n<li>CVE-2026-64423</li>\n<li>CVE-2026-64425</li>\n<li>CVE-2026-64538</li>\n<li>CVE-2026-64545</li>\n<li>CVE-2026-64552</li>\n<li>CVE-2026-64560</li>\n</ul>\n<p>&nbsp;</p>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens' operational guidelines for Industrial Security (<a href="https://www.siemens.com/cert/operational-guidelines-industrial-securit">https://www.siemens.com/cert/operational-guidelines-industrial-securit</a>y), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: <a href="https://www.siemens.com/industrialsecurity">https://www.siemens.com/industrialsecurity</a></p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: <a href="https://www.siemens.com/cert/advisories">https://www.siemens.com/cert/advisories</a></p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: <a href="https://www.siemens.com/productcert/terms-of-use">https://www.siemens.com/productcert/terms-of-use</a>.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.</p>\n<ul>\n<li>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<p>&nbsp;</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT <a href="https://productcert.siemens.com/productcert/html/ssa-457936.html">SSA-457936</a> from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-457936 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens WinCC", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-13.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens WinCC are affected:</p>\n<ul>\n<li>SIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241)</li>\n<li>SIMATIC WinCC V8.0 vers:intdot/&lt;8.0.0.11 (CVE-2026-59241)</li>\n<li>SIMATIC WinCC V8.1 vers:intdot/&lt;8.1.7 (CVE-2026-59241)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.8</td>\n<td>Siemens</td>\n<td>SIMATIC WinCC V7.5</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Incorrect Privilege Assignment</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-59241</div>\n<div class="c-expandable-textbox__body">The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>SIMATIC WinCC V7.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC WinCC V8.0 &lt; V8.0 Update 11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V8.0 Update 11 or later version</p>\n</div>\n<hr>\n<h5>SIMATIC WinCC V8.1 &lt; V8.1 Update 7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V8.1 Update 7 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/266.html">CWE-266 Incorrect Privilege Assignment</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-59241">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-550198 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-550198 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Industrial Edge Device Kit", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-09.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.</strong></p>\n<p>The following versions of Siemens Industrial Edge Device Kit are affected:</p>\n<ul>\n<li>Industrial Edge Device Kit - arm64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.26 vers:intdot/&lt;1.26.2.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.27 vers:intdot/&lt;1.27.1.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.28 vers:intdot/&lt;1.28.0.6 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.26 vers:intdot/&lt;1.26.2.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.27 vers:intdot/&lt;1.27.1.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.28 vers:intdot/&lt;1.28.0.6 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 9.1</td>\n<td>Siemens</td>\n<td>Industrial Edge Device Kit - arm64 V1.10</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Path Traversal: '.../...//'</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-44414</div>\n<div class="c-expandable-textbox__body">Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>48 Affected Products</h4>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/35.html">CWE-35 Path Traversal: '.../...//'</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.8</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-44414">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-44415</div>\n<div class="c-expandable-textbox__body">Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>96 Affected Products</h4>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/35.html">CWE-35 Path Traversal: '.../...//'</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>9.1</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-44415">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-377139 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-377139 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Capital Embedded AR Classic", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-04.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</strong></p>\n<p>The following versions of Siemens Capital Embedded AR Classic are affected:</p>\n<ul>\n<li>Capital Embedded AR Classic 431-422 vers:all/* (CVE-2026-89208)</li>\n<li>Capital Embedded AR Classic R20-11 vers:intdot/&lt;2303 (CVE-2026-89208)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 5.3</td>\n<td>Siemens</td>\n<td>Capital Embedded AR Classic 431-422</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Read</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89208</div>\n<div class="c-expandable-textbox__body">The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>Capital Embedded AR Classic 431-422</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Apply network segmentation and put the ECUs behind properly configured gateways/firewalls</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Capital Embedded AR Classic R20-11 &lt; V2303</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Apply network segmentation and put the ECUs behind properly configured gateways/firewalls</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2303 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89208">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-055299 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-055299 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "InterSystems Corporation InterSystems IRIS for Health", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-295-01.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.</strong></p>\n<p>The following versions of InterSystems Corporation InterSystems IRIS for Health are affected:</p>\n<ul>\n<li>InterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.1</td>\n<td>InterSystems Corporation</td>\n<td>InterSystems IRIS for Health</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Cleartext Transmission of Sensitive Information</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Healthcare and Public Health</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>United States</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-111594</div>\n<div class="c-expandable-textbox__body">InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2026.2.0.221</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2026.1.0.235</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2025.3.0.226</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/319.html">CWE-319 Cleartext Transmission of Sensitive Information</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.1</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n<tr>\n<td>4.0</td>\n<td>9.2</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-111594">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Abhinav Agarwal reported this vulnerability to CISA and InterSystems Corporation.</li>\n</ul>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<p>CISA also recommends users take the following measures to protect themselves from social engineering attacks:</p>\n<ul type="disc">\n<li>Do not click web links or open attachments in unsolicited email messages.</li>\n<li>Refer to <a href="https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing">Recognizing and Avoiding Email Scams</a> for more information on avoiding email scams.</li>\n<li>Refer to <a href="https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks">Avoiding Social Engineering and Phishing Attacks</a> for more information on social engineering attacks.</li>\n</ul>\n<p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.</p>\n<hr>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-22</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-22</td>\n<td>1</td>\n<td>Initial Publication</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens PSS(R)SINCAL", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-06.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.</strong></p>\n<p>The following versions of Siemens PSS(R)SINCAL are affected:</p>\n<ul>\n<li>PSS(R)SINCAL V21.5 vers:all/* (CVE-2026-84854)</li>\n<li>PSS(R)SINCAL V22.0 vers:all/* (CVE-2026-84854)</li>\n<li>PSS(R)SINCAL V22.5 vers:intdot/&lt;22.5.5 (CVE-2026-84854)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7</td>\n<td>Siemens</td>\n<td>PSS(R)SINCAL V21.5</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Write</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-84854</div>\n<div class="c-expandable-textbox__body">In the WibuKey driver, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>PSS(R)SINCAL V21.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>PSS(R)SINCAL V22.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>PSS(R)SINCAL V22.5 &lt; V22.5 Update 5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V22.5 Update 5 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/787.html">CWE-787 Out-of-bounds Write</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-84854">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design. Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-148322 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-148322 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Software Center", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-03.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it.</strong></p>\n<p>The following versions of Siemens Software Center are affected:</p>\n<ul>\n<li>Siemens Software Center vers:intdot/&lt;4.0.9.8 (CVE-2026-110936)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 6.7</td>\n<td>Siemens</td>\n<td>Siemens Software Center</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Uncontrolled Search Path Element</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-110936</div>\n<div class="c-expandable-textbox__body">The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>Siemens Software Center &lt; V4.0.9.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V4.0.9.8 or later version (All existing versions of SSC will be auto updated on next startup. The latest version can also be downloaded in the respective link)</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/427.html">CWE-427 Uncontrolled Search Path Element</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.7</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-110936">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-580366 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-15</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-15</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-17</td>\n<td>2</td>\n<td>Added remediation for Siemens Software Center</td>\n</tr>\n<tr>\n<td>2026-10-19</td>\n<td>3</td>\n<td>Added reference to blog post about active exploitation of the vulnerability</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>4</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-580366 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Controlador de acceso a estación Siemens RUGGEDCOM CROSSBOW", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-15.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:</p>\n<ul>\n<li>RUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/&lt;6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 9.8</td>\n<td>Siemens</td>\n<td>RUGGEDCOM CROSSBOW Station Access Controller (SAC)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Numeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding, Heap-based Buffer Overflow</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-6965</div>\n<div class="c-expandable-textbox__body">There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/197.html">CWE-197 Numeric Truncation Error</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-6965">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-70873</div>\n<div class="c-expandable-textbox__body">An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/244.html">CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-70873">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-71316</div>\n<div class="c-expandable-textbox__body">SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options. Fixed on or around 2025-12-26.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/176.html">CWE-176 Improper Handling of Unicode Encoding</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>9.8</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-71316">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-11822</div>\n<div class="c-expandable-textbox__body">SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/122.html">CWE-122 Heap-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-11822">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-11824</div>\n<div class="c-expandable-textbox__body">SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/122.html">CWE-122 Heap-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-11824">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-765416 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-765416 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "NCSC (UK)", "title": "Problema de seguridad crítico que afecta a PHP", "url": "https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php", "published": "Wed, 21 Oct 2026 12:00:00 +0000", "summary": "Actualizado: El NCSC está instando a las organizaciones del Reino Unido a tomar medidas inmediatas para mitigar un problema de seguridad que afecta a PHP (CVE-2026-109618 y CVE-2026-109619)."}, {"source": "NCSC (UK)", "title": "Presentando un nuevo capítulo de IA en el libro de problemas de investigación del NCSC", "url": "https://www.ncsc.gov.uk/blogs/introducing-new-ai-chapter-ncsc-research-problem-book", "published": "Tue, 20 Oct 2026 12:00:00 +0000", "summary": "Se está produciendo una revolución en la intersección entre la inteligencia artificial y la ciberseguridad."}, {"source": "NCSC (UK)", "title": "Uso de TLS para proteger datos", "url": "https://www.ncsc.gov.uk/guidance/using-tls-to-protect-data", "published": "Thu, 15 Oct 2026 12:00:00 +0000", "summary": "Perfiles recomendados para configurar TLS de forma segura en las versiones y escenarios más comunes, con orientación adicional para la gestión de versiones anteriores."}, {"source": "NCSC (UK)", "title": "Actualizaciones post-cuánticas de nuestra guía de TLS", "url": "https://www.ncsc.gov.uk/blogs/post-quantum-updates-to-our-tls-guidance", "published": "Thu, 15 Oct 2026 12:00:00 +0000", "summary": "El NCSC publica sus recomendaciones para configurar la criptografía post-cuántica en TLS. Ahora es el momento de migrar."}, {"source": "NCSC (UK)", "title": "Ayude al NCSC a comprender cómo las organizaciones abordan el riesgo de la superficie de ataque externa", "url": "https://www.ncsc.gov.uk/blogs/help-ncsc-understand-how-organisations-approach-external-attack-surface-risk", "published": "Mon, 12 Oct 2026 12:00:00 +0000", "summary": "Buscamos escuchar a personas involucradas en la evaluación, selección o adopción de EASM."}, {"source": "NCSC (UK)", "title": "Actores maliciosos vinculados a China señalados por el Reino Unido y socios internacionales por dirigirse a datos sensibles a nivel mundial", "url": "https://www.ncsc.gov.uk/news/china-linked-actors-called-out-by-uk-and-international-partners-for-targeting-sensitive-data", "published": "Thu, 08 Oct 2026 12:00:00 +0000", "summary": "Un aviso conjunto con socios internacionales resalta el objetivo malicioso de organizaciones de una amplia gama de sectores en todo el mundo."}, {"source": "NCSC (UK)", "title": "Incidente que afecta a los clientes de ASOS", "url": "https://www.ncsc.gov.uk/news/incident-affecting-asos-customers", "published": "Tue, 06 Oct 2026 12:00:00 +0000", "summary": "ASOS ha declarado que está investigando un incidente cibernético y que es posible que se haya accedido a cierta información personal de los clientes."}, {"source": "NCSC (UK)", "title": "Explotación de vulnerabilidades que afectan a Citrix NetScaler ADC y Citrix NetScaler Gateway", "url": "https://www.ncsc.gov.uk/news/exploitation-of-vulnerabilities-affecting-citrix-netscaler-adc-and-citrix-netscaler-gateway", "published": "Mon, 28 Sep 2026 12:00:00 +0000", "summary": "El NCSC está instando a las organizaciones del Reino Unido a mitigar de inmediato las vulnerabilidades que afectan a Citrix NetScaler ADC y Gateway, de las cuales dos están siendo explotadas activamente."}, {"source": "NCSC (UK)", "title": "No se defiende simplemente de forma agéntica", "url": "https://www.ncsc.gov.uk/blogs/one-does-not-simply-defend-agentically", "published": "Mon, 21 Sep 2026 12:00:00 +0000", "summary": "Los defensores no pueden utilizar la IA de la misma manera que los atacantes, pero hay mucho que pueden hacer para desbloquear el potencial de la defensa cibernética agéntica."}, {"source": "NCSC (UK)", "title": "Simulación de adversarios: lo que necesita saber", "url": "https://www.ncsc.gov.uk/guidance/adversary-simulation-what-you-need-to-know", "published": "Thu, 17 Sep 2026 12:00:00 +0000", "summary": "La simulación de adversarios ('red teaming') pone a prueba su capacidad para prevenir, detectar y responder a ataques cibernéticos."}, {"source": "NCSC (UK)", "title": "Simulación de Adversario Cibernético (CyAS): los documentos del esquema ya están disponibles", "url": "https://www.ncsc.gov.uk/blogs/cyber-adversary-simulation-cyas-scheme-documents-now-available", "published": "Thu, 17 Sep 2026 12:00:00 +0000", "summary": "Nuestra visión de la simulación de adversarios cibernéticos eficaz y cómo los proveedores certificados pueden ofrecerla."}, {"source": "NCSC (UK)", "title": "Ciberataques iraníes dirigidos a disidentes, activistas y periodistas", "url": "https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists", "published": "Tue, 15 Sep 2026 12:00:00 +0000", "summary": "Advertencia sobre el malware CHOSEN BRICK, que incluye un análisis técnico y consejos para ayudar a las personas y organizaciones a protegerse."}, {"source": "NCSC (UK)", "title": "El Reino Unido y sus aliados exponen el spyware utilizado por actores estatales iraníes para apuntar a disidentes, activistas y periodistas", "url": "https://www.ncsc.gov.uk/news/uk-allies-expose-spyware-iranian-state-actors-target-dissidents-activists-journalists", "published": "Tue, 15 Sep 2026 12:00:00 +0000", "summary": "El Reino Unido y sus aliados proporcionan asesoramiento para ayudar a las organizaciones y personas en riesgo a detectar y contrarrestar la amenaza del malware CHOSEN BRICK."}, {"source": "NCSC (UK)", "title": "Los riesgos ocultos de la IA sombreada", "url": "https://www.ncsc.gov.uk/blogs/the-hidden-risks-of-shadow-ai", "published": "Mon, 07 Sep 2026 12:00:00 +0000", "summary": "Comprender por qué el personal utiliza herramientas de IA no aprobadas es clave para gestionar los desafíos de seguridad que estas pueden crear."}, {"source": "NCSC (UK)", "title": "La actividad cibernética disruptiva resalta el riesgo de los sistemas expuestos a internet y los dispositivos de borde", "url": "https://www.ncsc.gov.uk/news/disruptive-cyber-activity-highlights-risk-from-internet-exposed-systems-and-edge-devices", "published": "Thu, 27 Aug 2026 12:00:00 +0000", "summary": "Se anima a los responsables de la tecnología operativa a abordar las vulnerabilidades evitables y a construir una resiliencia cibernética a largo plazo."}, {"source": "SANS ISC (US)", "title": "Lanzamiento de YARA-X 1.22.0, (Sun, Oct 25th)", "url": "https://isc.sans.edu/diary/rss/33454", "published": "Sun, 25 Oct 2026 19:57:53 GMT", "summary": "

La YARA-X&#;x26;#;39;s 1.22.0 trae 11 mejoras y 9 correcciones de errores.

"}, {"source": "SANS ISC (US)", "title": "(Confiable)? Explotabilidad de php2shell, (Vie, 23 de oct)", "url": "https://isc.sans.edu/diary/rss/33452", "published": "Fri, 23 Oct 2026 20:04:47 GMT", "summary": "

Ayer todos estaban corriendo como locos (yo incluido :) por la vulnerabilidad php2shell.

"}, {"source": "SANS ISC (US)", "title": "Resumen de vulnerabilidades de PHP, (viernes, 23 de octubre)", "url": "https://isc.sans.edu/diary/rss/33450", "published": "Fri, 23 Oct 2026 13:43:20 GMT", "summary": "

Esta mañana, volvimos a Infocon Verde. Como de costumbre, elevamos el Infocon para alertarles sobre situaciones emergentes que requieren atención inmediata. PHP encajaba en esa descripción. A estas alturas, ya lo saben o probablemente nunca lo sabrán, así que es hora de volver a \"negocio como de costumbre\".

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Friday, October 23rd, 2026 https://isc.sans.edu/podcastdetail/10148, (Fri, Oct 23rd)", "url": "https://isc.sans.edu/diary/rss/33448", "published": "Fri, 23 Oct 2026 10:25:11 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licencia Creative Commons Atribución-NoComercial 3.0 Estados Unidos."}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)", "url": "https://isc.sans.edu/diary/rss/33446", "published": "Thu, 22 Oct 2026 02:00:02 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licencia Creative Commons Atribución-NoComercial 3.0 Estados Unidos."}, {"source": "SANS ISC (US)", "title": "Vulnerabilidad crítica en PHP (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)", "url": "https://isc.sans.edu/diary/rss/33440", "published": "Wed, 21 Oct 2026 21:02:43 GMT", "summary": "

PHP.net anunció que lanzará una actualización crítica hoy. Decidimos cambiar el infoCon a AMARILLO debido al uso generalizado de PHP, la gravedad esperada de la falla (CVSS 9.4) y la disponibilidad de exploits PoC tempranos antes de que el parche estuviera disponible.

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)", "url": "https://isc.sans.edu/diary/rss/33438", "published": "Wed, 21 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licencia Creative Commons Atribución-NoComercial 3.0 Estados Unidos."}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)", "url": "https://isc.sans.edu/diary/rss/33436", "published": "Tue, 20 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licencia Creative Commons Atribución-NoComercial 3.0 Estados Unidos."}, {"source": "SANS ISC (US)", "title": "Proyectos VBA huérfanos dentro de archivos DWG: Regla YARA, (Sun, Oct 18th)", "url": "https://isc.sans.edu/diary/rss/33434", "published": "Sun, 18 Oct 2026 12:59:30 GMT", "summary": "

Esta es la regla de YARA que usé para detectar \"Proyectos VBA Huérfanos Dentro de Archivos DWG\".

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)", "url": "https://isc.sans.edu/diary/rss/33432", "published": "Fri, 16 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licencia Creative Commons Atribución-NoComercial 3.0 Estados Unidos."}], "industry": [{"title": "La explotación de PHP2Shell afecta a una entidad gubernamental en medio de escaneos globales y señales de hacking asistido por IA", "why": "Los actores de la amenaza están utilizando la IA agéntica para acelerar las actividades de post-explotación contra las vulnerabilidades críticas de RCE en PHP, con una entidad gubernamental comprometida en un plazo de dos horas desde el acceso inicial.", "url": "https://thehackernews.com/2026/10/php2shell-exploitation-hits-government.html", "source": "The Hacker News"}, {"title": "Vulnerabilidades no parcheadas en SSH de Tailscale podrían permitir que un dispositivo comprometido acceda a privilegios de root en otros servidores", "why": "Un investigador de seguridad ha identificado una configuración crítica incorrecta en Tailscale SSH que permite el movimiento lateral y la escalada de privilegios a root en otros nodos de la red si el reenvío de puertos está habilitado.", "url": "https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html", "source": "The Hacker News"}, {"title": "El defecto del decodificador Brotli detrás del RCE de Node.js también afecta a Bun, Python y otro software de uso generalizado", "why": "Una vulnerabilidad de corrupción de memoria en el decodificador Brotli de Google (CVE-2026-111497) afecta a una amplia gama de pilas de software populares, lo que supone un riesgo significativo de ejecución remota de código mediante datos comprimidos manipulados.", "url": "https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html", "source": "The Hacker News"}, {"title": "CISA señala dos defectos críticos explotados activamente en Collabora Online y Arista VeloCloud", "why": "CISA ha añadido dos vulnerabilidades críticas a su catálogo de Vulnerabilidades Explotadas Conocidas, lo que indica una explotación activa en el mundo real de defectos en Collabora Online y Arista VeloCloud Orchestrator.", "url": "https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html", "source": "The Hacker News"}, {"title": "El bootkit UEFI BlackX elude el Secure Boot en sistemas Windows parcheados que carecen de revocaciones", "why": "Kaspersky informa sobre un nuevo bootkit UEFI que apunta a organizaciones diplomáticas en Asia Central y que elude Secure Boot en sistemas que no han aplicado revocaciones de certificados específicas.", "url": "https://thehackernews.com/2026/10/blackx-uefi-bootkit-bypasses-secure.html", "source": "The Hacker News"}, {"title": "eMudhra abandona el mercado global de certificados TLS tras el compromiso de las claves de firma de la CA", "why": "El compromiso de ocho CAs intermedias con claves privadas ridículamente débiles está forzando una migración masiva de certificados TLS, lo que destaca las brechas críticas en la gestión de almacenes de confianza de terceros para sistemas Java y no navegadores.", "url": "https://www.csoonline.com/article/4239634/emudhra-quits-global-tls-certificate-market-after-compromise-of-ca-signing-keys-2.html", "source": "CSO Online"}, {"title": "Se insta a los equipos de seguridad a centrar la defensa en el perfil de vulnerabilidades que los atacantes apuntan con mayor frecuencia", "why": "Los datos de Rapid7 muestran que los atacantes están convirtiendo en armas vulnerabilidades remotas, sin autenticación y de clic cero en un plazo de 72 horas, lo que requiere un cambio de la aplicación de parches mensual a un triaje inmediato basado en el riesgo de los CVE de alta severidad.", "url": "https://www.csoonline.com/article/4239255/security-teams-urged-to-center-defense-on-the-single-profile-attackers-target-most.html", "source": "CSO Online"}, {"title": "Posible nuevo día cero de radio en iPhone de Cellebrite", "why": "Un documento filtrado sugiere que Cellebrite ha desarrollado una nueva capacidad de 'Desbloqueos Avanzados' que funciona contra la Protección de Dispositivo Robado mediante un dispositivo dedicado, lo que genera preocupaciones significativas sobre la seguridad física y la explotación de ceros días.", "url": "https://www.schneier.com/blog/archives/2026/10/possible-new-cellebrite-iphone-radio-zero-day.html", "source": "Schneier on Security"}], "iocs": [{"ioc": "ae1241f4a4787c0362285f91657c4f91722345c78bd8b986f8f5e88d6db6083c", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "Mirai", "confidence_level": 100, "first_seen": "2026-10-26 02:55:44 UTC", "reference": null}, {"ioc": "014e2e634bfdfc4ca6600898ad3d3ade92fcea86c9018c50bd057ef9baf8582a", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:43 UTC", "reference": null}, {"ioc": "f1d7fda8e42f2f6376d2e2ed4192b291a882ba29c5bc55b0745e218c10074896", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:42 UTC", "reference": null}, {"ioc": "7cc069a862258bd7ebfcaebf5bff72cc9ffbcb10e5ddb514a92dbf08f10d94fe", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:41 UTC", "reference": null}, {"ioc": "2b5b0ba9685b09277c3fee6c19e3ded60e57a72418f2550f2b1e43e00e1aebe8", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:40 UTC", "reference": null}, {"ioc": "fea6e379e5864f824165cd54548ec905672862fbe3cabfd04b7c59bb691541e6", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:39 UTC", "reference": null}, {"ioc": "a4389db74221b51ac7b1d60e30c954c20f639af06e2aefd79a57c1b3b137cd02", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:37 UTC", "reference": null}, {"ioc": "2e093d09ceb674fe47e130112dd38e753acedf1fec9e947149a7a2ca7d584fdb", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:36 UTC", "reference": null}, {"ioc": "deb1f5d8b7de5fe4b2370147a0a7871867b07edb2b72c2fec4ff191526fb0126", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:35 UTC", "reference": null}, {"ioc": "e28df40dc234353fbc06390833e0305a2e7bcd150e324cf9b0812d0ccc27d932", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:34 UTC", "reference": null}, {"ioc": "f2c33bee5bb42be519c8735151349bcbf8d91a749be7604ad5c970054195831f", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:33 UTC", "reference": null}, {"ioc": "70473b5416d501b66e4976a352dab4a8d19080bd4a2d8e5bc86a7b48209d3020", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:32 UTC", "reference": null}, {"ioc": "09f365cc415195f75e5aaa64137bb02d11d605e8c37b2783b93a383575ef4907", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:31 UTC", "reference": null}, {"ioc": "b8ab7dcb982eb6c2889bda259d85c8cd86001cad2b8ee22aa58662415e3012c4", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:30 UTC", "reference": null}, {"ioc": "e0fabbd75a800c5c18bab1a50d8225a0282c18f966acd76e4a4a914163940d14", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:29 UTC", "reference": null}], "iobs": [{"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-110447", "attack_technique": null}, {"behaviour": "OS command injection", "based_on": "CWE-78", "cve": "CVE-2026-110447", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-106931", "attack_technique": null}, {"behaviour": "OS command injection", "based_on": "CWE-78", "cve": "CVE-2026-106931", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96654", "attack_technique": null}, {"behaviour": "exploitation of Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability", "based_on": "CWE-84", "cve": "CVE-2026-96654", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96652", "attack_technique": null}, {"behaviour": "server-side request forgery (SSRF) callbacks", "based_on": "CWE-918", "cve": "CVE-2026-96652", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96656", "attack_technique": null}, {"behaviour": "exploitation of Plex Media Server External Control of File Name or Path Vulnerability", "based_on": "CWE-73", "cve": "CVE-2026-96656", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96655", "attack_technique": null}, {"behaviour": "server-side request forgery (SSRF) callbacks", "based_on": "CWE-918", "cve": "CVE-2026-96655", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-114625", "attack_technique": null}, {"behaviour": "SQL injection", "based_on": "CWE-89", "cve": "CVE-2026-114625", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-110936", "attack_technique": null}, {"behaviour": "exploitation of Siemens Software Center Uncontrolled Search Path Element Vulnerability", "based_on": "CWE-427", "cve": "CVE-2026-110936", "attack_technique": null}], "sources_failed": [], "quiet_week": false, "byline": "Curated for you by Geek with the Peak", "_text_model": "dgx/vllm/qwen3.8-27b-nvfp4", "rubric_verdict": "APPROVE", "rubric_reasons": [], "rubric_judge": "m3/mlx/qwen3-coder-next-4bit", "language": "es", "translated_by": "dgx/vllm/qwen3.8-27b-nvfp4", "source_language": "en"}