{"date": "2026-10-26", "generated_at": "2026-10-26T03:05:53.488317+00:00", "headline": "Le vulnerabilità di iniezione di comandi e SSRF negli strumenti per ufficio e media sono attivamente sfruttate, richiedendo una validazione continua immediata rispetto alla patching passiva.", "summary": "Il panorama delle minacce odierno è dominato dallo sfruttamento attivo di vulnerabilità di iniezione di comandi OS e SSRF in software ampiamente distribuiti come Collabora Online, Plex e strumenti Siemens. Con l'aggiunta di nuove voci al catalogo delle Vulnerabilità Sfruttate Note (KEV) da parte del CISA, il rischio di accesso non autorizzato ed esfiltrazione di dati non è più teorico. La presenza di payload Mirai e SalatStealer freschi in circolazione segnala che gli attaccanti stanno concatenando queste debolezze con famiglie di malware consolidate. Il tuo team di sicurezza deve passare dall'assumere la conformità alle patch al dimostrare l'efficacia dei controlli attraverso la simulazione continua. Questo brief delinea le specifiche vulnerabilità e i concreti passaggi di convalida necessari per garantire che le tue difese blocchino effettivamente questi attacchi prima che diventino violazioni.", "brief": {"headline": "Le vulnerabilità di iniezione di comandi e SSRF negli strumenti per ufficio e media sono attivamente sfruttate, richiedendo una validazione continua immediata rispetto alla patching passiva.", "summary": "Il panorama delle minacce odierno è dominato dallo sfruttamento attivo di vulnerabilità di iniezione di comandi OS e SSRF in software ampiamente distribuiti come Collabora Online, Plex e strumenti Siemens. Con l'aggiunta di nuove voci al catalogo delle Vulnerabilità Sfruttate Note (KEV) da parte del CISA, il rischio di accesso non autorizzato ed esfiltrazione di dati non è più teorico. La presenza di payload Mirai e SalatStealer freschi in circolazione segnala che gli attaccanti stanno concatenando queste debolezze con famiglie di malware consolidate. Il tuo team di sicurezza deve passare dall'assumere la conformità alle patch al dimostrare l'efficacia dei controlli attraverso la simulazione continua. Questo brief delinea le specifiche vulnerabilità e i concreti passaggi di convalida necessari per garantire che le tue difese blocchino effettivamente questi attacchi prima che diventino violazioni.", "items": [{"cve_id": "CVE-2026-110447", "narrative": "Il CODE Server integrato in Collabora Online presenta una vulnerabilità di iniezione di comandi OS, che consente agli aggressori di eseguire comandi arbitrari sul sistema host. Questa vulnerabilità è classificata come la più grave a causa della sua sfruttamento attivo in ambiente reale, confermato dall'aggiunta al KEV di CISA il 2026-10-23 e da un'alta probabilità EPSS del 12,3%. La principale esposizione risiede negli ambienti di editing collaborativo, dove input non fidati potrebbero raggiungere il server, consentendo la compromissione completa del sistema. Da una prospettiva CTEM, è necessario validare continuamente se il firewall per applicazioni web e i controlli endpoint intercettano effettivamente questi tentativi di iniezione, anziché dare per scontato che la patch sia sufficiente. Se la validazione fallisce, è necessario mobilitarsi spingendo regole di rilevamento specifiche per anomalie nell'esecuzione di comandi al SIEM e assegnando un responsabile per rimediare alla sanificazione degli input sottostante. Questo garantisce che, anche se la vulnerabilità persiste, la catena di attacco venga interrotta a livello di rete o endpoint, prevenendo il movimento laterale.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447"}, {"cve_id": "CVE-2026-106931", "narrative": "EG Secure Solutions' SiteGuard Server Edition è vulnerabile all'iniezione di comandi OS, una debolezza critica che consente agli aggressori remoti di eseguire comandi di sistema arbitrari. Si colloca al secondo posto perché è stato aggiunto al catalogo KEV di CISA il 2026-10-20, con un punteggio EPSS moderato del 2,5% che indica una probabilità realistica di sfruttamento. Il rischio è particolarmente acuto per le organizzazioni che utilizzano questo prodotto per trasferimenti di file sicuri, dove un singolo payload malevolo potrebbe concedere agli aggressori l'accesso a livello root. La validazione continua è essenziale in questo caso; è necessario simulare il payload di iniezione contro le difese perimetrali esistenti per dimostrare che bloccano lo sfruttamento. Se la simulazione rivela un gap, è necessario mobilitarsi distribuendo automaticamente regole di mitigazione al gateway web e verificando che gli strumenti di rilevamento endpoint segnalino l'esecuzione del processo risultante. Questo approccio garantisce che la postura di sicurezza sia dimostrata efficace, non solo presunta conforme, riducendo così la finestra di esposizione per questa vulnerabilità attivamente mirata.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931"}, {"cve_id": "CVE-2026-96654", "narrative": "Plex Media Server è affetto da una neutralizzazione impropria degli schemi URI codificati, che può portare a cross-site scripting o ad altri attacchi client-side quando vengono elaborati link malevoli. Questa vulnerabilità si classifica al terzo posto a causa della sua inclusione nel catalogo KEV del CISA il 2026-10-20, con una probabilità EPSS del 1,9%. L'esposizione è significativa per qualsiasi utente che esegue Plex su una rete domestica o di piccola impresa, dove un link manipolato potrebbe compromettere il server o le sessioni utente. Per affrontare questo problema, la convalida continua dovrebbe concentrarsi sul testare se i controlli web sanificano correttamente questi schemi codificati prima che raggiungano l'applicazione. Se la convalida mostra che gli URI malevoli passano attraverso, mobilitarsi aggiornando le regole del firewall dell'applicazione web per bloccare specifici pattern URI e assicurandosi che le protezioni degli endpoint rilevino qualsiasi esecuzione di script successiva. Questa convalida proattiva garantisce che le difese siano robuste contro i trucchi di codifica specifici attualmente utilizzati dagli attaccanti, anziché fare affidamento su una configurazione statica che potrebbe essere cambiata.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654"}, {"cve_id": "CVE-2026-96652", "narrative": "Plex Media Server presenta una vulnerabilità di Server-Side Request Forgery (SSRF), che consente agli attaccanti di costringere il server a effettuare richieste verso destinazioni non previste. Si classifica al quarto posto perché è stata aggiunta al KEV del CISA il 2026-10-20, con un punteggio EPSS del 1,8%. Questo difetto è pericoloso perché può essere utilizzato per sondare le reti interne o accedere ai servizi di metadati del cloud, portando potenzialmente al furto di credenziali. Lo scenario di attacco realistico prevede un attaccante che invia una richiesta manipolata per indurre il server Plex ad accedere a risorse interne sensibili. La convalida continua deve testare se la segmentazione della rete e il filtraggio in uscita impediscono effettivamente al server di raggiungere questi obiettivi interni. Se la simulazione rivela che le callback SSRF sono possibili, mobilitarsi stringendo le regole del firewall per bloccare le richieste in uscita dal servizio Plex e distribuendo la logica di rilevamento per allertare sui pattern di traffico interno insoliti. Questo garantisce che, anche se il difetto dell'applicazione esiste, i controlli di rete contengano efficacemente il raggio d'azione.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652"}, {"cve_id": "CVE-2026-96656", "narrative": "Plex Media Server è vulnerabile al controllo esterno dei nomi o dei percorsi dei file, il che può consentire agli attaccanti di scrivere file in posizioni arbitrarie sul sistema. Si classifica al quinto posto a causa del suo stato KEV aggiunto il 2026-10-20 e di una probabilità EPSS del 1,8%. Il rischio è elevato per qualsiasi implementazione in cui il server ha permessi di scrittura su directory sensibili, poiché ciò potrebbe portare all'esecuzione remota di codice o alla manomissione dei dati. Gli attaccanti potrebbero sfruttare questo problema manipolando i parametri di caricamento dei file per posizionare script malevoli in directory accessibili via web. La convalida continua dovrebbe simulare questa manipolazione del percorso del file per verificare che il monitoraggio dell'integrità dei file e i controlli di accesso impediscano scritture non autorizzate. Se la convalida fallisce, mobilitarsi limitando i permessi del file system dell'account di servizio Plex e distribuendo regole di rilevamento che allertino sulla creazione imprevista di file in directory critiche. Questo approccio garantisce che i controlli siano testati attivamente contro le tecniche specifiche di manipolazione dei file utilizzate in campo, fornendo un livello di difesa affidabile.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656"}, {"cve_id": "CVE-2026-96655", "narrative": "Un'altra vulnerabilità di Server-Side Request Forgery (SSRF) in Plex Media Server consente agli attaccanti di eludere i controlli di accesso previsti e di interagire con i servizi interni. Si classifica al sesto posto perché è stata aggiunta al catalogo KEV del CISA il 2026-10-20, con un punteggio EPSS del 1,6%. Questo difetto è particolarmente preoccupante negli ambienti ospitati nel cloud, dove l'SSRF può essere utilizzato per rubare credenziali temporanee dai endpoint di metadati. Lo scenario di attacco prevede che un attaccante crei una richiesta che induce il server Plex a recuperare dati sensibili da un indirizzo IP interno. La validazione continua deve testare se le politiche di rete bloccano efficacemente il server Plex dall'accesso a questi servizi di metadati interni. Se la simulazione mostra che la richiesta ha successo, mobilitarsi implementando un filtraggio egress rigoroso e distribuendo logiche di rilevamento per monitorare le richieste interne anomale originate dal servizio Plex. Questo garantisce che i controlli di rete siano dimostrati in grado di fermare gli attacchi SSRF, anziché affidarsi alla gestione interna delle richieste da parte dell'applicazione.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655"}, {"cve_id": "CVE-2026-114625", "narrative": "Arista VeloCloud Orchestrator è vulnerabile all'iniezione SQL, che può consentire agli attaccanti di manipolare le query del database e potenzialmente ottenere accesso non autorizzato a dati sensibili. Si classifica al settimo posto a causa della sua aggiunta al KEV del CISA il 2026-10-23, con una probabilità EPSS dell'1,0%. L'esposizione è significativa per gli operatori di rete che utilizzano VeloCloud, poiché un'iniezione riuscita potrebbe compromettere l'integrità dei dati di configurazione di rete. Gli attaccanti potrebbero sfruttare questa vulnerabilità iniettendo comandi SQL malevoli attraverso i campi di input nell'interfaccia web dell'orchestratore. La validazione continua dovrebbe testare se il firewall del database e i controlli a livello di applicazione neutralizzano efficacemente questi tentativi di iniezione. Se la validazione rivela che le query malevole vengono eseguite, mobilitarsi distribuendo l'applicazione forzata di query parametrizzate e aggiornando il SIEM per rilevare i pattern di iniezione SQL nei log del database. Questo garantisce che le difese siano attivamente validate contro le specifiche tecniche di iniezione SQL in uso, fornendo un robusto livello di protezione per l'infrastruttura di rete.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625"}, {"cve_id": "CVE-2026-110936", "narrative": "Siemens Software Center è affetto da una vulnerabilità di elemento di percorso di ricerca non controllato, che può consentire agli attaccanti di eseguire codice arbitrario collocando file malevoli nel percorso di ricerca dell'applicazione. Si classifica all'ottavo posto perché è stato aggiunto al KEV del CISA il 2026-10-20, con un punteggio EPSS del 1,0%. Questa vulnerabilità è particolarmente pericolosa negli ambienti industriali in cui il software Siemens viene utilizzato per gestire asset critici, poiché potrebbe portare a una compromissione completa del sistema. Lo scenario di attacco prevede che un attaccante collochi una DLL o un eseguibile malevolo in una directory che il Software Center cerca per le librerie. La convalida continua deve testare se i controlli degli endpoint e il monitoraggio dell'integrità dei file impediscono l'esecuzione di questi binari non fidati. Se la simulazione mostra che il file malevolo viene eseguito, è necessario mobilitarsi restringendo il percorso di ricerca a directory fidate e distribuendo regole di rilevamento che segnalino la creazione imprevista di processi da parte del Software Center. Ciò garantisce che i controlli siano dimostrati efficaci nel bloccare questo specifico tipo di esecuzione del codice, proteggendo le operazioni industriali da potenziali interruzioni.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936"}]}, "editorial": {"headline": "Smetti di indovinare se i tuoi controlli funzionano; inizia a dimostrare che non falliscono.", "editorial": "Let’s be honest: the threat landscape isn’t just noisy; it’s actively hostile. Today’s ranked findings tell a clear story. We have eight vulnerabilities under active exploitation, all sitting in the CISA KEV catalog. The headline grabber is CVE-2026-110447, an OS command injection in Collabora Online with a 12% EPSS score. That’s not a theoretical risk; it’s a live fire drill. But don’t just look at the top item. The cluster of Plex Media Server flaws (CVE-2026-96654, -96652, -96656, -96655) and the Arista VeloCloud SQL injection (CVE-2026-114625) show that attackers are diversifying their entry points. They are hitting web interfaces, internal orchestrators, and media servers simultaneously. \n\nHere is the view: if you are relying on patching alone, you are already behind. The real question isn't \"have we patched this?\" It is \"does our detection stack actually catch this specific exploit pattern?\" We have new IOCs for Mirai and SalatStealer payloads, plus specific IOBs for SSRF callbacks and SQL injection. These are not just data points; they are test cases. \n\nYour CTEM programme must shift from passive monitoring to active validation. You need to simulate these exact exploits against your production controls. If your WAF lets a crafted URI scheme through, or if your EDR misses a command injection payload, you have a gap. Don't assume your controls are robust; prove it. If the simulation fails, mobilise immediately. Push the specific detection rules to your SIEM, assign an owner to the remediation, and capture the evidence for your next audit. It’s not about having the best tools; it’s about knowing, with certainty, that they work when the bad guys are already inside the door.", "ctem": {"continuous_validation": "Simulate the specific exploit payloads for CVE-2026-110447 and the Plex SSRF vulnerabilities against your current endpoint and web defences. Validate whether your controls detect the associated IOCs for Mirai and SalatStealer, as well as the behavioural indicators for SQL injection and command injection.", "mobilisation": "For any validation failure, automatically push updated detection rules to your SIEM and EDR platforms. Assign remediation owners to patch the affected systems and generate framework-mapped evidence to demonstrate compliance and closure."}}, "top10": [{"cve_id": "CVE-2026-110447", "name": "Collabora Online – Vulnerabilità di iniezione di comandi OS nel server CODE integrato", "vendor": "Collabora", "product": "Collabora Online – Built-in CODE Server", "kev": true, "kev_date_added": "2026-10-23", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447", "epss": 0.12328, "priority_rank": 1, "priority_reason": "exploited in the wild (KEV, added 2026-10-23); EPSS 12%", "recently_covered": true, "cwe": ["CWE-78"], "narrative": "Il CODE Server integrato in Collabora Online presenta una vulnerabilità di iniezione di comandi OS, che consente agli aggressori di eseguire comandi arbitrari sul sistema host. Questa vulnerabilità è classificata come la più grave a causa della sua sfruttamento attivo in ambiente reale, confermato dall'aggiunta al KEV di CISA il 2026-10-23 e da un'alta probabilità EPSS del 12,3%. La principale esposizione risiede negli ambienti di editing collaborativo, dove input non fidati potrebbero raggiungere il server, consentendo la compromissione completa del sistema. Da una prospettiva CTEM, è necessario validare continuamente se il firewall per applicazioni web e i controlli endpoint intercettano effettivamente questi tentativi di iniezione, anziché dare per scontato che la patch sia sufficiente. Se la validazione fallisce, è necessario mobilitarsi spingendo regole di rilevamento specifiche per anomalie nell'esecuzione di comandi al SIEM e assegnando un responsabile per rimediare alla sanificazione degli input sottostante. Questo garantisce che, anche se la vulnerabilità persiste, la catena di attacco venga interrotta a livello di rete o endpoint, prevenendo il movimento laterale."}, {"cve_id": "CVE-2026-106931", "name": "Vulnerabilità di iniezione di comandi OS in EG Secure Solutions SiteGuard Server Edition", "vendor": "EG Secure Solutions", "product": "SiteGuard Server Edition", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931", "epss": 0.02528, "priority_rank": 2, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 3%", "recently_covered": true, "cwe": ["CWE-78"], "narrative": "EG Secure Solutions' SiteGuard Server Edition è vulnerabile all'iniezione di comandi OS, una debolezza critica che consente agli aggressori remoti di eseguire comandi di sistema arbitrari. Si colloca al secondo posto perché è stato aggiunto al catalogo KEV di CISA il 2026-10-20, con un punteggio EPSS moderato del 2,5% che indica una probabilità realistica di sfruttamento. Il rischio è particolarmente acuto per le organizzazioni che utilizzano questo prodotto per trasferimenti di file sicuri, dove un singolo payload malevolo potrebbe concedere agli aggressori l'accesso a livello root. La validazione continua è essenziale in questo caso; è necessario simulare il payload di iniezione contro le difese perimetrali esistenti per dimostrare che bloccano lo sfruttamento. Se la simulazione rivela un gap, è necessario mobilitarsi distribuendo automaticamente regole di mitigazione al gateway web e verificando che gli strumenti di rilevamento endpoint segnalino l'esecuzione del processo risultante. Questo approccio garantisce che la postura di sicurezza sia dimostrata efficace, non solo presunta conforme, riducendo così la finestra di esposizione per questa vulnerabilità attivamente mirata."}, {"cve_id": "CVE-2026-96654", "name": "Vulnerabilità di neutralizzazione impropria degli schemi URI codificati in una pagina web in Plex Media Server", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654", "epss": 0.01949, "priority_rank": 3, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-84"], "narrative": "Plex Media Server è affetto da una neutralizzazione impropria degli schemi URI codificati, che può portare a cross-site scripting o ad altri attacchi client-side quando vengono elaborati link malevoli. Questa vulnerabilità si classifica al terzo posto a causa della sua inclusione nel catalogo KEV del CISA il 2026-10-20, con una probabilità EPSS del 1,9%. L'esposizione è significativa per qualsiasi utente che esegue Plex su una rete domestica o di piccola impresa, dove un link manipolato potrebbe compromettere il server o le sessioni utente. Per affrontare questo problema, la convalida continua dovrebbe concentrarsi sul testare se i controlli web sanificano correttamente questi schemi codificati prima che raggiungano l'applicazione. Se la convalida mostra che gli URI malevoli passano attraverso, mobilitarsi aggiornando le regole del firewall dell'applicazione web per bloccare specifici pattern URI e assicurandosi che le protezioni degli endpoint rilevino qualsiasi esecuzione di script successiva. Questa convalida proattiva garantisce che le difese siano robuste contro i trucchi di codifica specifici attualmente utilizzati dagli attaccanti, anziché fare affidamento su una configurazione statica che potrebbe essere cambiata."}, {"cve_id": "CVE-2026-96652", "name": "Vulnerabilità di Server-Side Request Forgery (SSRF) in Plex Media Server", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652", "epss": 0.01821, "priority_rank": 4, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-918"], "narrative": "Plex Media Server presenta una vulnerabilità di Server-Side Request Forgery (SSRF), che consente agli attaccanti di costringere il server a effettuare richieste verso destinazioni non previste. Si classifica al quarto posto perché è stata aggiunta al KEV del CISA il 2026-10-20, con un punteggio EPSS del 1,8%. Questo difetto è pericoloso perché può essere utilizzato per sondare le reti interne o accedere ai servizi di metadati del cloud, portando potenzialmente al furto di credenziali. Lo scenario di attacco realistico prevede un attaccante che invia una richiesta manipolata per indurre il server Plex ad accedere a risorse interne sensibili. La convalida continua deve testare se la segmentazione della rete e il filtraggio in uscita impediscono effettivamente al server di raggiungere questi obiettivi interni. Se la simulazione rivela che le callback SSRF sono possibili, mobilitarsi stringendo le regole del firewall per bloccare le richieste in uscita dal servizio Plex e distribuendo la logica di rilevamento per allertare sui pattern di traffico interno insoliti. Questo garantisce che, anche se il difetto dell'applicazione esiste, i controlli di rete contengano efficacemente il raggio d'azione."}, {"cve_id": "CVE-2026-96656", "name": "Vulnerabilità di controllo esterno del nome o del percorso del file in Plex Media Server", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656", "epss": 0.01785, "priority_rank": 5, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-73"], "narrative": "Plex Media Server è vulnerabile al controllo esterno dei nomi o dei percorsi dei file, il che può consentire agli attaccanti di scrivere file in posizioni arbitrarie sul sistema. Si classifica al quinto posto a causa del suo stato KEV aggiunto il 2026-10-20 e di una probabilità EPSS del 1,8%. Il rischio è elevato per qualsiasi implementazione in cui il server ha permessi di scrittura su directory sensibili, poiché ciò potrebbe portare all'esecuzione remota di codice o alla manomissione dei dati. Gli attaccanti potrebbero sfruttare questo problema manipolando i parametri di caricamento dei file per posizionare script malevoli in directory accessibili via web. La convalida continua dovrebbe simulare questa manipolazione del percorso del file per verificare che il monitoraggio dell'integrità dei file e i controlli di accesso impediscano scritture non autorizzate. Se la convalida fallisce, mobilitarsi limitando i permessi del file system dell'account di servizio Plex e distribuendo regole di rilevamento che allertino sulla creazione imprevista di file in directory critiche. Questo approccio garantisce che i controlli siano testati attivamente contro le tecniche specifiche di manipolazione dei file utilizzate in campo, fornendo un livello di difesa affidabile."}, {"cve_id": "CVE-2026-96655", "name": "Vulnerabilità di Server-Side Request Forgery (SSRF) in Plex Media Server", "vendor": "Plex", "product": "Media Server", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655", "epss": 0.01637, "priority_rank": 6, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 2%", "recently_covered": true, "cwe": ["CWE-918"], "narrative": "Un'altra vulnerabilità di Server-Side Request Forgery (SSRF) in Plex Media Server consente agli attaccanti di eludere i controlli di accesso previsti e di interagire con i servizi interni. Si classifica al sesto posto perché è stata aggiunta al catalogo KEV del CISA il 2026-10-20, con un punteggio EPSS del 1,6%. Questo difetto è particolarmente preoccupante negli ambienti ospitati nel cloud, dove l'SSRF può essere utilizzato per rubare credenziali temporanee dai endpoint di metadati. Lo scenario di attacco prevede che un attaccante crei una richiesta che induce il server Plex a recuperare dati sensibili da un indirizzo IP interno. La validazione continua deve testare se le politiche di rete bloccano efficacemente il server Plex dall'accesso a questi servizi di metadati interni. Se la simulazione mostra che la richiesta ha successo, mobilitarsi implementando un filtraggio egress rigoroso e distribuendo logiche di rilevamento per monitorare le richieste interne anomale originate dal servizio Plex. Questo garantisce che i controlli di rete siano dimostrati in grado di fermare gli attacchi SSRF, anziché affidarsi alla gestione interna delle richieste da parte dell'applicazione."}, {"cve_id": "CVE-2026-114625", "name": "Vulnerabilità di SQL Injection in Arista VeloCloud Orchestrator", "vendor": "Arista", "product": "VeloCloud Orchestrator", "kev": true, "kev_date_added": "2026-10-23", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625", "epss": 0.01025, "priority_rank": 7, "priority_reason": "exploited in the wild (KEV, added 2026-10-23); EPSS 1%", "recently_covered": true, "cwe": ["CWE-89"], "narrative": "Arista VeloCloud Orchestrator è vulnerabile all'iniezione SQL, che può consentire agli attaccanti di manipolare le query del database e potenzialmente ottenere accesso non autorizzato a dati sensibili. Si classifica al settimo posto a causa della sua aggiunta al KEV del CISA il 2026-10-23, con una probabilità EPSS dell'1,0%. L'esposizione è significativa per gli operatori di rete che utilizzano VeloCloud, poiché un'iniezione riuscita potrebbe compromettere l'integrità dei dati di configurazione di rete. Gli attaccanti potrebbero sfruttare questa vulnerabilità iniettendo comandi SQL malevoli attraverso i campi di input nell'interfaccia web dell'orchestratore. La validazione continua dovrebbe testare se il firewall del database e i controlli a livello di applicazione neutralizzano efficacemente questi tentativi di iniezione. Se la validazione rivela che le query malevole vengono eseguite, mobilitarsi distribuendo l'applicazione forzata di query parametrizzate e aggiornando il SIEM per rilevare i pattern di iniezione SQL nei log del database. Questo garantisce che le difese siano attivamente validate contro le specifiche tecniche di iniezione SQL in uso, fornendo un robusto livello di protezione per l'infrastruttura di rete."}, {"cve_id": "CVE-2026-110936", "name": "Vulnerabilità di elemento di percorso di ricerca non controllato in Siemens Software Center", "vendor": "Siemens", "product": "Software Center", "kev": true, "kev_date_added": "2026-10-20", "ransomware": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936", "epss": 0.00967, "priority_rank": 8, "priority_reason": "exploited in the wild (KEV, added 2026-10-20); EPSS 1%", "recently_covered": true, "cwe": ["CWE-427"], "narrative": "Siemens Software Center è affetto da una vulnerabilità di elemento di percorso di ricerca non controllato, che può consentire agli attaccanti di eseguire codice arbitrario collocando file malevoli nel percorso di ricerca dell'applicazione. Si classifica all'ottavo posto perché è stato aggiunto al KEV del CISA il 2026-10-20, con un punteggio EPSS del 1,0%. Questa vulnerabilità è particolarmente pericolosa negli ambienti industriali in cui il software Siemens viene utilizzato per gestire asset critici, poiché potrebbe portare a una compromissione completa del sistema. Lo scenario di attacco prevede che un attaccante collochi una DLL o un eseguibile malevolo in una directory che il Software Center cerca per le librerie. La convalida continua deve testare se i controlli degli endpoint e il monitoraggio dell'integrità dei file impediscono l'esecuzione di questi binari non fidati. Se la simulazione mostra che il file malevolo viene eseguito, è necessario mobilitarsi restringendo il percorso di ricerca a directory fidate e distribuendo regole di rilevamento che segnalino la creazione imprevista di processi da parte del Software Center. Ciò garantisce che i controlli siano dimostrati efficaci nel bloccare questo specifico tipo di esecuzione del codice, proteggendo le operazioni industriali da potenziali interruzioni."}], "advisories": [{"source": "CISA (US)", "title": "CISA aggiunge una vulnerabilità nota sfruttata al catalogo", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog-0", "published": "Fri, 23 Oct 26 12:00:00 +0000", "summary": "<p>CISA ha aggiunto una nuova vulnerabilità al proprio <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Catalogo delle Vulnerabilità Sfruttate Note (KEV)</a>, sulla base di prove di sfruttamento attivo.</p>\n<ul type="disc">\n<li><a class="Hyperlink SCXW162250516 BCX8" href="https://www.cve.org/CVERecord?id=CVE-2026-110447" target="_blank" rel="noreferrer noopener"><u>CVE-2026-110447</u></a> Collabora Online – Vulnerabilità di iniezione di comandi OS nel server CODE integrato </li>\n</ul>\n<p>Questo tipo di vulnerabilità è un vettore di attacco frequente per gli attori informatici maliziosi e comporta rischi significativi per l'ente federale.</p>\n<p><a href="https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk">Direttiva Operativa Vincolante (BOD) 26-04: Prioritizzazione degli aggiornamenti di sicurezza basata sul rischio</a> stabilisce i requisiti di gestione delle vulnerabilità per le agenzie del ramo esecutivo civile federale (FCEB). La BOD 26-04 rafforza l'importanza del Catalogo KEV e richiede alle agenzie federali di dare priorità alla rapida rimediabilità delle vulnerabilità ad alto rischio, in particolare quelle identificate dalle Common Vulnerabilities and Exposures (CVE) elencate nel Catalogo KEV di CISA su asset esposti pubblicamente che concedono il controllo totale dell'asset dopo lo sfruttamento, rimandando l'intervento per le vulnerabilità a basso rischio. La BOD 26-04 stabilisce inoltre aspettative di base su quando le agenzie devono verificare se gli attori della minaccia hanno compromesso il sistema prima dell'applicazione della patch.</p>\n<p>Sebbene la BOD 26-04 si applichi solo alle agenzie FCEB, CISA incoraggia tutte le organizzazioni ad adottare una gestione delle vulnerabilità basata sul rischio e a dare priorità alla rimediabilità delle <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">vulnerabilità del Catalogo KEV</a>. CISA continuerà ad aggiungere al catalogo le vulnerabilità che soddisfano i <a href="https://www.cisa.gov/known-exploited-vulnerabilities">criteri specificati</a>.</p>\n<p>A conoscenza di una vulnerabilità sfruttata non attualmente elencata nel Catalogo KEV? Inviala per una potenziale inclusione tramite il <a href="https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w" target="_blank">Modulo di Nomina KEV</a> di CISA. Le potenziali aggiunte al KEV devono avere un ID CVE, prove di sfruttamento e chiare indicazioni di mitigazione.</p>"}, {"source": "CISA (US)", "title": "CISA aggiunge una vulnerabilità nota sfruttata al catalogo", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog", "published": "Fri, 23 Oct 26 12:00:00 +0000", "summary": "<p>CISA ha aggiunto una nuova vulnerabilità al suo&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Catalogo delle Vulnerabilità Sfruttate Note (KEV)</a>, sulla base di evidenze di sfruttamento attivo.</p>\n<ul type="disc">\n<li><a href="https://www.cve.org/CVERecord?id=CVE-2026-114625" target="_blank">CVE-2026-114625</a> Vulnerabilità di iniezione SQL in Arista VeloCloud Orchestrator</li>\n</ul>\n<p>Questo tipo di vulnerabilità è un vettore di attacco frequente per gli attori informatici maliziosi e rappresenta rischi significativi per l'impresa federale.</p>\n<p><a href="https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk">Direttiva Operativa Vincolante (BOD) 26-04: Prioritizzazione degli aggiornamenti di sicurezza basata sul rischio</a> stabilisce i requisiti di gestione delle vulnerabilità per le agenzie del Ramo Esecutivo Civile Federale (FCEB). La BOD 26-04 rafforza l'importanza del Catalogo KEV e richiede alle agenzie federali di dare priorità alla rapida rimozione delle vulnerabilità ad alto rischio, in particolare quelle identificate dalle Common Vulnerabilities and Exposures (CVE) elencate nel Catalogo KEV di CISA su asset esposti pubblicamente che concedono il controllo totale dell'asset dopo lo sfruttamento, rinviando l'azione per le vulnerabilità a rischio inferiore. La BOD 26-04 stabilisce inoltre aspettative di base per quando le agenzie devono verificare se gli attori minaccia hanno compromesso il sistema prima dell'applicazione della patch.</p>\n<p>Sebbene la BOD 26-04 si applichi solo alle agenzie FCEB, CISA incoraggia tutte le organizzazioni ad adottare la gestione delle vulnerabilità basata sul rischio e a dare priorità alla rimozione delle <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">vulnerabilità del Catalogo KEV</a>. CISA continuerà ad aggiungere al catalogo le vulnerabilità che soddisfano i <a href="https://www.cisa.gov/known-exploited-vulnerabilities">criteri specificati</a>.</p>\n<p>A conoscenza di una vulnerabilità sfruttata non attualmente elencata nel Catalogo KEV? Inviala per una potenziale aggiunta tramite il <a href="https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_1Zwu52kgK2OYf3w" target="_blank">Modulo di Nomina KEV</a> di CISA. Le potenziali aggiunte al KEV devono avere un ID CVE, evidenze di sfruttamento e chiare indicazioni di mitigazione.</p>"}, {"source": "CISA (US)", "title": "Siemens SIMATIC S7 Webserver API", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-10.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens SIMATIC S7 Webserver API are affected:</p>\n<ul>\n<li>.NET Client Library for SIMATIC S7 Webserver API vers:intdot/&lt;3.3.61, vers:intdot/&lt;3.3.62 (CVE-2026-85114, CVE-2026-85115)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7.5</td>\n<td>Siemens</td>\n<td>.NET Client Library for SIMATIC S7 Webserver API</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">2 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Generation of Error Message Containing Sensitive Information</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-85114</div>\n<div class="c-expandable-textbox__body">Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.61</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.3.61 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/22.html">CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-85114">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-85115</div>\n<div class="c-expandable-textbox__body">Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.61</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>.NET Client Library for SIMATIC S7 Webserver API &lt; V3.3.62</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.3.62 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/209.html">CWE-209 Generation of Error Message Containing Sensitive Information</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.5</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-85115">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-390352 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-390352 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Prodotti Siemens APOGEE, TALON e Desigo PXC/PXM", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-08.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens APOGEE, TALON and Desigo PXC/PXM Products are affected:</p>\n<ul>\n<li>APOGEE MBC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MBC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MEC (PPC) (BACnet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE MEC (PPC) (P2 Ethernet) vers:all/* (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Compact (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Compact (P2 Ethernet) vers:intdot/&lt;2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Modular (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>APOGEE PXC Modular (P2 Ethernet) vers:intdot/&lt;2.8.21 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>Desigo PXC00-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC00-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC001-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC100-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC12-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC128-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC200-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC22-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC22.1-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC36.1-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC50-E.D vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXC64-U vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>Desigo PXM20-E vers:intdot/&gt;=2.3 (CVE-2026-89208)</li>\n<li>TALON TC Compact (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n<li>TALON TC Modular (BACnet) vers:intdot/&lt;3.5.7 (CVE-2026-102073, CVE-2026-102074, CVE-2026-102075, CVE-2026-102076)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.2</td>\n<td>Siemens</td>\n<td>APOGEE MBC (PPC) (BACnet)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">3 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Read, Integer Underflow (Wrap or Wraparound), Stack-based Buffer Overflow</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89208</div>\n<div class="c-expandable-textbox__body">The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>13 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89208">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102073</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>23 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/191.html">CWE-191 Integer Underflow (Wrap or Wraparound)</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.2</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102073">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102074</div>\n<div class="c-expandable-textbox__body">The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>33 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102074">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102075</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>43 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102075">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-102076</div>\n<div class="c-expandable-textbox__body">The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>53 Affected Products</h4>\n<hr>\n<h5>Desigo PXC00-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC001-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC100-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC12-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC128-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC200-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC22.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC36.1-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC50-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC64-U &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXM20-E &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>Desigo PXC00-E.D &gt;= V2.3</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MBC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>TALON TC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>TALON TC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (BACnet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE MEC (PPC) (P2 Ethernet)</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Compact (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (BACnet) &lt; V3.5.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V3.5.7 or later version</p>\n</div>\n<hr>\n<h5>APOGEE PXC Modular (P2 Ethernet) &lt; V2.8.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>&nbsp;CVE-2026-89208 - Apply network segmentation and put the controllers behind properly configured gateways/firewalls.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Disable the FTP/Web service (Note that the FTP/Web service is disabled by default on APOGEE, Desigo, and TALON products.)</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2.8.21 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-102076">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-333035 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-333035 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens RUGGEDCOM CROSSBOW", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-12.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM CROSSBOW are affected:</p>\n<ul>\n<li>RUGGEDCOM CROSSBOW vers:intdot/&lt;6.0 (CVE-2026-89196, CVE-2026-89197, CVE-2026-89198, CVE-2026-89199, CVE-2026-89200, CVE-2026-89201, CVE-2026-89202, CVE-2026-89203, CVE-2026-89204, CVE-2026-89205, CVE-2026-89206)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.8</td>\n<td>Siemens</td>\n<td>RUGGEDCOM CROSSBOW</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Authorization Bypass Through User-Controlled Key, Insertion of Sensitive Information Into Sent Data, Client-Side Enforcement of Server-Side Security</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89196</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89196">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89197</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89197">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89198</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89198">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89199</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89199">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89200</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.7</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89200">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89201</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>6 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/89.html">CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89201">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89202</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>7 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.5</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89202">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89203</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>8 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/201.html">CWE-201 Insertion of Sensitive Information Into Sent Data</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>4.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89203">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89204</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>9 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/639.html">CWE-639 Authorization Bypass Through User-Controlled Key</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.4</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89204">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89205</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>10 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/602.html">CWE-602 Client-Side Enforcement of Server-Side Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89205">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89206</div>\n<div class="c-expandable-textbox__body">Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>11 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/602.html">CWE-602 Client-Side Enforcement of Server-Side Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89206">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-508506 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-508506 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Dispositivi Siemens RUGGEDCOM APE1808", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-18.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM APE1808 Devices are affected:</p>\n<ul>\n<li>RUGGEDCOM APE1808 vers:all/* (CVE-2026-33387, CVE-2026-33388, CVE-2026-33389, CVE-2026-33391, CVE-2026-33920)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7.5</td>\n<td>Siemens</td>\n<td>RUGGEDCOM APE1808</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Neutralization of Special Elements Used in a Template Engine, Incorrect Authorization, Lack of Administrator Control over Security, Cross-Site Request Forgery (CSRF)</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33387</div>\n<div class="c-expandable-textbox__body">A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a malicious dashboard. When the victim views or imports the dashboard, the payload executes in their browser context, allowing the attacker to modify application data or disrupt application availability.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/1336.html">CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>4.6</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33387">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33388</div>\n<div class="c-expandable-textbox__body">An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values are not directly visible, but the user can delete entries or edit their properties. An attacker who deletes or edits an entry can disrupt authentication for dependent devices, and one who manipulates an entry's configuration may be able to indirectly obtain the credentials.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/863.html">CWE-863 Incorrect Authorization</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.4</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33388">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33389</div>\n<div class="c-expandable-textbox__body">An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned between a sensor and a polled device can, during a polling session, impersonate the device and intercept the communication, including the credentials used to access it. The captured credentials can then be replayed to authenticate against the device itself or against other devices sharing the same credentials, allowing the attacker to access and tamper with the device's data and to disrupt its operations.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/671.html">CWE-671 Lack of Administrator Control over Security</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33389">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33391</div>\n<div class="c-expandable-textbox__body">An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart Polling discovery configuration. This allows the attacker to disrupt the visibility of assets in the monitored network.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/863.html">CWE-863 Incorrect Authorization</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.4</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33391">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-33920</div>\n<div class="c-expandable-textbox__body">A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performed by the victim in this state is attributed to the attacker's account, compromising the integrity of the audit trail.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h5>RUGGEDCOM APE1808 with Nozomi Guardian/CMC</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/352.html">CWE-352 Cross-Site Request Forgery (CSRF)</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>3.5</td>\n<td>LOW</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-33920">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-911336 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-911336 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Industrial Edge App Publisher", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-02.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on the local machine through Node.js integration. Siemens has released an update for the Industrial Edge App Publisher and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens Industrial Edge App Publisher are affected:</p>\n<ul>\n<li>Industrial Edge App Publisher vers:intdot/&lt;1.27.9 (CVE-2026-78556, CVE-2026-78557)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.3</td>\n<td>Siemens</td>\n<td>Industrial Edge App Publisher</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">2 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Improper Certificate Validation, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-78556</div>\n<div class="c-expandable-textbox__body">The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended server.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/295.html">CWE-295 Improper Certificate Validation</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.4</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-78556">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-78557</div>\n<div class="c-expandable-textbox__body">The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge App Publisher &lt; V1.27.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.9 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/79.html">CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.3</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-78557">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-968435 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-968435 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-11_test.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP are affected:</p>\n<ul>\n<li>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/&gt;=3.1.7</li>\n<li>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n<li>SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) vers:intdot/&gt;=3.1.7&nbsp;</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 10</td>\n<td>Siemens</td>\n<td>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">428 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Access of Resource Using Incompatible Type ('Type Confusion'), Access of Uninitialized Pointer, Active Debug Code, Buffer Access with Incorrect Length Value, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Buffer Underwrite ('Buffer Underflow'), Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), Deadlock, Divide By Zero, Expired Pointer Dereference, Exposure of Sensitive Information Due to Incompatible Policies, Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution, Improper Enforcement of Behavioral Workflow, Improper Following of Specification by Caller, Improper Handling of Invalid Use of Special Elements, Improper Handling of Length Parameter Inconsistency, Improper Handling of Missing Special Element, Improper Handling of Structural Elements, Improper Input Validation, Improper Locking, Improper Neutralization of Null Byte or NUL Character, Improper Null Termination, Improper Privilege Management, Improper Resource Locking, Improper Resource Shutdown or Release, Improper Update of Reference Count, Improper Validation of Specified Index, Position, or Offset in Input, Improper Validation of Specified Quantity in Input, Improper Validation of Specified Type of Input, Improperly Implemented Security Check for Standard, Incomplete Cleanup, Incomplete Internal State Distinction, Incorrect Calculation of Buffer Size, Incorrect Conversion between Numeric Types, Incorrect Privilege Assignment, Incorrect Synchronization, Incorrect Type Conversion or Cast, Integer Overflow or Wraparound, Loop with Unreachable Exit Condition ('Infinite Loop'), Memory Allocation with Excessive Size Value, Misinterpretation of Input, Missing Critical Step in Authentication, Missing Default Case in Multiple Condition Expression, Missing Encryption of Sensitive Data, Missing Initialization of Resource, Missing Release of Memory after Effective Lifetime, Missing Release of Resource after Effective Lifetime, Missing Report of Error Condition, Missing Synchronization, Multiple Releases of Same Resource or Handle, NULL Pointer Dereference, Operation on a Resource after Expiration or Release, Out-of-bounds Read, Out-of-bounds Write, Plaintext Storage of a Password, Race Condition within a Thread, Reachable Assertion, Release of Invalid Pointer or Reference, Signal Handler Race Condition, Time-of-check Time-of-use (TOCTOU) Race Condition, Transmission of Private Resources into a New Sphere ('Resource Leak'), Trust of System Event Data, Unchecked Return Value, Uncontrolled Recursion, Untrusted Pointer Dereference, Use After Free, Use of Externally-Controlled Format String, Use of Uninitialized Resource, Use of Uninitialized Variable, Write-what-where Condition</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2021-41617</div>\n<div class="c-expandable-textbox__body">sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) &gt;= V3.1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>Only build and run applications from trusted sources.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/311.html">CWE-311 Missing Encryption of Sensitive Data</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2021-41617">View CVE Details</a></p>\n</div>\n</div>\n<ul type="disc">\n<li>CVE-2021-41617</li>\n<li>CVE-2023-28531</li>\n<li>CVE-2023-51384</li>\n<li>CVE-2023-52927</li>\n<li>CVE-2023-53292</li>\n<li>CVE-2024-26783</li>\n<li>CVE-2024-27056</li>\n<li>CVE-2024-28956</li>\n<li>CVE-2024-36903</li>\n<li>CVE-2024-36927</li>\n<li>CVE-2024-42079</li>\n<li>CVE-2024-46786</li>\n<li>CVE-2024-47736</li>\n<li>CVE-2024-47809</li>\n<li>CVE-2024-49968</li>\n<li>CVE-2024-49994</li>\n<li>CVE-2024-49998</li>\n<li>CVE-2024-50014</li>\n<li>CVE-2024-50063</li>\n<li>CVE-2024-50164</li>\n<li>CVE-2024-50298</li>\n<li>CVE-2024-53124</li>\n<li>CVE-2024-53170</li>\n<li>CVE-2024-54458</li>\n<li>CVE-2024-56631</li>\n<li>CVE-2024-56703</li>\n<li>CVE-2024-56719</li>\n<li>CVE-2024-57917</li>\n<li>CVE-2024-57924</li>\n<li>CVE-2024-57973</li>\n<li>CVE-2024-57977</li>\n<li>CVE-2024-57979</li>\n<li>CVE-2024-58011</li>\n<li>CVE-2024-58016</li>\n<li>CVE-2024-58020</li>\n<li>CVE-2024-58056</li>\n<li>CVE-2024-58058</li>\n<li>CVE-2024-58061</li>\n<li>CVE-2024-58086</li>\n<li>CVE-2025-21645</li>\n<li>CVE-2025-21648</li>\n<li>CVE-2025-21655</li>\n<li>CVE-2025-21676</li>\n<li>CVE-2025-21682</li>\n<li>CVE-2025-21702</li>\n<li>CVE-2025-21705</li>\n<li>CVE-2025-21706</li>\n<li>CVE-2025-21707</li>\n<li>CVE-2025-21718</li>\n<li>CVE-2025-21731</li>\n<li>CVE-2025-21745</li>\n<li>CVE-2025-21758</li>\n<li>CVE-2025-21760</li>\n<li>CVE-2025-21764</li>\n<li>CVE-2025-21765</li>\n<li>CVE-2025-21780</li>\n<li>CVE-2025-21795</li>\n<li>CVE-2025-21796</li>\n<li>CVE-2025-21802</li>\n<li>CVE-2025-21814</li>\n<li>CVE-2025-21846</li>\n<li>CVE-2025-21853</li>\n<li>CVE-2025-21861</li>\n<li>CVE-2025-21863</li>\n<li>CVE-2025-21864</li>\n<li>CVE-2025-21867</li>\n<li>CVE-2025-21875</li>\n<li>CVE-2025-21887</li>\n<li>CVE-2025-21913</li>\n<li>CVE-2025-21919</li>\n<li>CVE-2025-21925</li>\n<li>CVE-2025-21926</li>\n<li>CVE-2025-21938</li>\n<li>CVE-2025-21959</li>\n<li>CVE-2025-21999</li>\n<li>CVE-2025-22005</li>\n<li>CVE-2025-22015</li>\n<li>CVE-2025-22055</li>\n<li>CVE-2025-22056</li>\n<li>CVE-2025-22060</li>\n<li>CVE-2025-22083</li>\n<li>CVE-2025-22090</li>\n<li>CVE-2025-22095</li>\n<li>CVE-2025-22107</li>\n<li>CVE-2025-22111</li>\n<li>CVE-2025-22121</li>\n<li>CVE-2025-23136</li>\n<li>CVE-2025-23143</li>\n<li>CVE-2025-37785</li>\n<li>CVE-2025-37909</li>\n<li>CVE-2025-37917</li>\n<li>CVE-2025-37945</li>\n<li>CVE-2025-37959</li>\n<li>CVE-2025-37964</li>\n<li>CVE-2025-37972</li>\n<li>CVE-2025-37980</li>\n<li>CVE-2025-38125</li>\n<li>CVE-2025-38162</li>\n<li>CVE-2025-38192</li>\n<li>CVE-2025-38201</li>\n<li>CVE-2025-38232</li>\n<li>CVE-2025-38322</li>\n<li>CVE-2025-38591</li>\n<li>CVE-2025-38614</li>\n<li>CVE-2025-38681</li>\n<li>CVE-2025-38704</li>\n<li>CVE-2025-38721</li>\n<li>CVE-2025-38725</li>\n<li>CVE-2025-38727</li>\n<li>CVE-2025-38732</li>\n<li>CVE-2025-38736</li>\n<li>CVE-2025-39681</li>\n<li>CVE-2025-39691</li>\n<li>CVE-2025-39721</li>\n<li>CVE-2025-39748</li>\n<li>CVE-2025-39756</li>\n<li>CVE-2025-39764</li>\n<li>CVE-2025-39770</li>\n<li>CVE-2025-39773</li>\n<li>CVE-2025-39782</li>\n<li>CVE-2025-39795</li>\n<li>CVE-2025-39826</li>\n<li>CVE-2025-39827</li>\n<li>CVE-2025-39845</li>\n<li>CVE-2025-39866</li>\n<li>CVE-2025-39871</li>\n<li>CVE-2025-39931</li>\n<li>CVE-2025-39953</li>\n<li>CVE-2025-39955</li>\n<li>CVE-2025-39964</li>\n<li>CVE-2025-39977</li>\n<li>CVE-2025-39978</li>\n<li>CVE-2025-39980</li>\n<li>CVE-2025-40022</li>\n<li>CVE-2025-40070</li>\n<li>CVE-2025-40078</li>\n<li>CVE-2025-40080</li>\n<li>CVE-2025-40105</li>\n<li>CVE-2025-40135</li>\n<li>CVE-2025-40149</li>\n<li>CVE-2025-40196</li>\n<li>CVE-2025-40219</li>\n<li>CVE-2025-40261</li>\n<li>CVE-2025-40300</li>\n<li>CVE-2025-61984</li>\n<li>CVE-2025-61985</li>\n<li>CVE-2025-68206</li>\n<li>CVE-2025-68261</li>\n<li>CVE-2025-68264</li>\n<li>CVE-2025-68265</li>\n<li>CVE-2025-68266</li>\n<li>CVE-2025-68291</li>\n<li>CVE-2025-68337</li>\n<li>CVE-2025-68349</li>\n<li>CVE-2025-68363</li>\n<li>CVE-2025-68371</li>\n<li>CVE-2025-68724</li>\n<li>CVE-2025-68725</li>\n<li>CVE-2025-68742</li>\n<li>CVE-2025-68764</li>\n<li>CVE-2025-68773</li>\n<li>CVE-2025-68776</li>\n<li>CVE-2025-68782</li>\n<li>CVE-2025-68787</li>\n<li>CVE-2025-68788</li>\n<li>CVE-2025-68798</li>\n<li>CVE-2025-68803</li>\n<li>CVE-2025-68814</li>\n<li>CVE-2025-68816</li>\n<li>CVE-2025-68818</li>\n<li>CVE-2025-68820</li>\n<li>CVE-2025-71064</li>\n<li>CVE-2025-71075</li>\n<li>CVE-2025-71079</li>\n<li>CVE-2025-71085</li>\n<li>CVE-2025-71086</li>\n<li>CVE-2025-71088</li>\n<li>CVE-2025-71095</li>\n<li>CVE-2025-71097</li>\n<li>CVE-2025-71098</li>\n<li>CVE-2025-71104</li>\n<li>CVE-2025-71112</li>\n<li>CVE-2025-71113</li>\n<li>CVE-2025-71114</li>\n<li>CVE-2025-71120</li>\n<li>CVE-2025-71123</li>\n<li>CVE-2025-71131</li>\n<li>CVE-2025-71161</li>\n<li>CVE-2025-71162</li>\n<li>CVE-2025-71163</li>\n<li>CVE-2025-71185</li>\n<li>CVE-2025-71186</li>\n<li>CVE-2025-71189</li>\n<li>CVE-2025-71190</li>\n<li>CVE-2025-71191</li>\n<li>CVE-2025-71197</li>\n<li>CVE-2025-71221</li>\n<li>CVE-2025-71265</li>\n<li>CVE-2025-71266</li>\n<li>CVE-2025-71267</li>\n<li>CVE-2026-3497</li>\n<li>CVE-2026-22977</li>\n<li>CVE-2026-22979</li>\n<li>CVE-2026-22980</li>\n<li>CVE-2026-22982</li>\n<li>CVE-2026-22992</li>\n<li>CVE-2026-22994</li>\n<li>CVE-2026-23003</li>\n<li>CVE-2026-23005</li>\n<li>CVE-2026-23010</li>\n<li>CVE-2026-23011</li>\n<li>CVE-2026-23019</li>\n<li>CVE-2026-23026</li>\n<li>CVE-2026-23038</li>\n<li>CVE-2026-23054</li>\n<li>CVE-2026-23060</li>\n<li>CVE-2026-23083</li>\n<li>CVE-2026-23084</li>\n<li>CVE-2026-23086</li>\n<li>CVE-2026-23087</li>\n<li>CVE-2026-23095</li>\n<li>CVE-2026-23100</li>\n<li>CVE-2026-23103</li>\n<li>CVE-2026-23110</li>\n<li>CVE-2026-23111</li>\n<li>CVE-2026-23113</li>\n<li>CVE-2026-23154</li>\n<li>CVE-2026-23204</li>\n<li>CVE-2026-23231</li>\n<li>CVE-2026-23242</li>\n<li>CVE-2026-23243</li>\n<li>CVE-2026-23245</li>\n<li>CVE-2026-23255</li>\n<li>CVE-2026-23270</li>\n<li>CVE-2026-23271</li>\n<li>CVE-2026-23273</li>\n<li>CVE-2026-23274</li>\n<li>CVE-2026-23277</li>\n<li>CVE-2026-23284</li>\n<li>CVE-2026-23287</li>\n<li>CVE-2026-23290</li>\n<li>CVE-2026-23293</li>\n<li>CVE-2026-23300</li>\n<li>CVE-2026-23304</li>\n<li>CVE-2026-23319</li>\n<li>CVE-2026-23321</li>\n<li>CVE-2026-23335</li>\n<li>CVE-2026-23340</li>\n<li>CVE-2026-23343</li>\n<li>CVE-2026-23351</li>\n<li>CVE-2026-23359</li>\n<li>CVE-2026-23365</li>\n<li>CVE-2026-23368</li>\n<li>CVE-2026-23370</li>\n<li>CVE-2026-23378</li>\n<li>CVE-2026-23379</li>\n<li>CVE-2026-23381</li>\n<li>CVE-2026-23391</li>\n<li>CVE-2026-23392</li>\n<li>CVE-2026-23397</li>\n<li>CVE-2026-23398</li>\n<li>CVE-2026-23399</li>\n<li>CVE-2026-23414</li>\n<li>CVE-2026-23422</li>\n<li>CVE-2026-23434</li>\n<li>CVE-2026-23438</li>\n<li>CVE-2026-23439</li>\n<li>CVE-2026-23446</li>\n<li>CVE-2026-23449</li>\n<li>CVE-2026-23450</li>\n<li>CVE-2026-23452</li>\n<li>CVE-2026-23454</li>\n<li>CVE-2026-23455</li>\n<li>CVE-2026-23456</li>\n<li>CVE-2026-23457</li>\n<li>CVE-2026-23458</li>\n<li>CVE-2026-23463</li>\n<li>CVE-2026-23474</li>\n<li>CVE-2026-23475</li>\n<li>CVE-2026-27135</li>\n<li>CVE-2026-31389</li>\n<li>CVE-2026-31391</li>\n<li>CVE-2026-31396</li>\n<li>CVE-2026-31402</li>\n<li>CVE-2026-31403</li>\n<li>CVE-2026-31411</li>\n<li>CVE-2026-31414</li>\n<li>CVE-2026-31415</li>\n<li>CVE-2026-31416</li>\n<li>CVE-2026-31417</li>\n<li>CVE-2026-31418</li>\n<li>CVE-2026-31421</li>\n<li>CVE-2026-31422</li>\n<li>CVE-2026-31423</li>\n<li>CVE-2026-31424</li>\n<li>CVE-2026-31427</li>\n<li>CVE-2026-31428</li>\n<li>CVE-2026-31441</li>\n<li>CVE-2026-31446</li>\n<li>CVE-2026-31447</li>\n<li>CVE-2026-31448</li>\n<li>CVE-2026-31449</li>\n<li>CVE-2026-31450</li>\n<li>CVE-2026-31452</li>\n<li>CVE-2026-31466</li>\n<li>CVE-2026-31469</li>\n<li>CVE-2026-31485</li>\n<li>CVE-2026-31494</li>\n<li>CVE-2026-31495</li>\n<li>CVE-2026-31496</li>\n<li>CVE-2026-31503</li>\n<li>CVE-2026-31504</li>\n<li>CVE-2026-31507</li>\n<li>CVE-2026-31508</li>\n<li>CVE-2026-31515</li>\n<li>CVE-2026-31518</li>\n<li>CVE-2026-31521</li>\n<li>CVE-2026-31533</li>\n<li>CVE-2026-31546</li>\n<li>CVE-2026-31555</li>\n<li>CVE-2026-31563</li>\n<li>CVE-2026-31565</li>\n<li>CVE-2026-31628</li>\n<li>CVE-2026-31634</li>\n<li>CVE-2026-31649</li>\n<li>CVE-2026-31651</li>\n<li>CVE-2026-31658</li>\n<li>CVE-2026-31664</li>\n<li>CVE-2026-31665</li>\n<li>CVE-2026-31669</li>\n<li>CVE-2026-31670</li>\n<li>CVE-2026-31671</li>\n<li>CVE-2026-31674</li>\n<li>CVE-2026-31680</li>\n<li>CVE-2026-31681</li>\n<li>CVE-2026-31682</li>\n<li>CVE-2026-31700</li>\n<li>CVE-2026-31737</li>\n<li>CVE-2026-31752</li>\n<li>CVE-2026-31761</li>\n<li>CVE-2026-31768</li>\n<li>CVE-2026-40355</li>\n<li>CVE-2026-41989</li>\n<li>CVE-2026-43011</li>\n<li>CVE-2026-43024</li>\n<li>CVE-2026-43025</li>\n<li>CVE-2026-43026</li>\n<li>CVE-2026-43027</li>\n<li>CVE-2026-43028</li>\n<li>CVE-2026-43030</li>\n<li>CVE-2026-43033</li>\n<li>CVE-2026-43035</li>\n<li>CVE-2026-43038</li>\n<li>CVE-2026-43040</li>\n<li>CVE-2026-43057</li>\n<li>CVE-2026-43071</li>\n<li>CVE-2026-43085</li>\n<li>CVE-2026-43089</li>\n<li>CVE-2026-43116</li>\n<li>CVE-2026-43216</li>\n<li>CVE-2026-43303</li>\n<li>CVE-2026-43492</li>\n<li>CVE-2026-43499</li>\n<li>CVE-2026-43501</li>\n<li>CVE-2026-45841</li>\n<li>CVE-2026-46015</li>\n<li>CVE-2026-46021</li>\n<li>CVE-2026-46033</li>\n<li>CVE-2026-46037</li>\n<li>CVE-2026-46040</li>\n<li>CVE-2026-46046</li>\n<li>CVE-2026-46086</li>\n<li>CVE-2026-46101</li>\n<li>CVE-2026-46116</li>\n<li>CVE-2026-46132</li>\n<li>CVE-2026-46172</li>\n<li>CVE-2026-46173</li>\n<li>CVE-2026-46174</li>\n<li>CVE-2026-46193</li>\n<li>CVE-2026-46303</li>\n<li>CVE-2026-46306</li>\n<li>CVE-2026-46323</li>\n<li>CVE-2026-46333</li>\n<li>CVE-2026-52910</li>\n<li>CVE-2026-52912</li>\n<li>CVE-2026-52930</li>\n<li>CVE-2026-52933</li>\n<li>CVE-2026-52942</li>\n<li>CVE-2026-52943</li>\n<li>CVE-2026-52946</li>\n<li>CVE-2026-52970</li>\n<li>CVE-2026-52986</li>\n<li>CVE-2026-52998</li>\n<li>CVE-2026-52999</li>\n<li>CVE-2026-53001</li>\n<li>CVE-2026-53002</li>\n<li>CVE-2026-53006</li>\n<li>CVE-2026-53012</li>\n<li>CVE-2026-53050</li>\n<li>CVE-2026-53134</li>\n<li>CVE-2026-53218</li>\n<li>CVE-2026-53219</li>\n<li>CVE-2026-53223</li>\n<li>CVE-2026-53236</li>\n<li>CVE-2026-53239</li>\n<li>CVE-2026-53249</li>\n<li>CVE-2026-53268</li>\n<li>CVE-2026-53269</li>\n<li>CVE-2026-53275</li>\n<li>CVE-2026-53295</li>\n<li>CVE-2026-53352</li>\n<li>CVE-2026-53400</li>\n<li>CVE-2026-63810</li>\n<li>CVE-2026-64279</li>\n<li>CVE-2026-64317</li>\n<li>CVE-2026-64370</li>\n<li>CVE-2026-64371</li>\n<li>CVE-2026-64375</li>\n<li>CVE-2026-64411</li>\n<li>CVE-2026-64412</li>\n<li>CVE-2026-64413</li>\n<li>CVE-2026-64422</li>\n<li>CVE-2026-64423</li>\n<li>CVE-2026-64425</li>\n<li>CVE-2026-64538</li>\n<li>CVE-2026-64545</li>\n<li>CVE-2026-64552</li>\n<li>CVE-2026-64560</li>\n</ul>\n<p>&nbsp;</p>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens' operational guidelines for Industrial Security (<a href="https://www.siemens.com/cert/operational-guidelines-industrial-securit">https://www.siemens.com/cert/operational-guidelines-industrial-securit</a>y), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: <a href="https://www.siemens.com/industrialsecurity">https://www.siemens.com/industrialsecurity</a></p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: <a href="https://www.siemens.com/cert/advisories">https://www.siemens.com/cert/advisories</a></p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: <a href="https://www.siemens.com/productcert/terms-of-use">https://www.siemens.com/productcert/terms-of-use</a>.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.</p>\n<ul>\n<li>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<p>&nbsp;</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT <a href="https://productcert.siemens.com/productcert/html/ssa-457936.html">SSA-457936</a> from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-457936 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens WinCC", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-13.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.</strong></p>\n<p>The following versions of Siemens WinCC are affected:</p>\n<ul>\n<li>SIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241)</li>\n<li>SIMATIC WinCC V8.0 vers:intdot/&lt;8.0.0.11 (CVE-2026-59241)</li>\n<li>SIMATIC WinCC V8.1 vers:intdot/&lt;8.1.7 (CVE-2026-59241)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.8</td>\n<td>Siemens</td>\n<td>SIMATIC WinCC V7.5</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Incorrect Privilege Assignment</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-59241</div>\n<div class="c-expandable-textbox__body">The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>SIMATIC WinCC V7.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>SIMATIC WinCC V8.0 &lt; V8.0 Update 11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V8.0 Update 11 or later version</p>\n</div>\n<hr>\n<h5>SIMATIC WinCC V8.1 &lt; V8.1 Update 7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V8.1 Update 7 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/266.html">CWE-266 Incorrect Privilege Assignment</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-59241">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-550198 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-550198 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Industrial Edge Device Kit", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-09.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.</strong></p>\n<p>The following versions of Siemens Industrial Edge Device Kit are affected:</p>\n<ul>\n<li>Industrial Edge Device Kit - arm64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.26 vers:intdot/&lt;1.26.2.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.27 vers:intdot/&lt;1.27.1.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.28 vers:intdot/&lt;1.28.0.6 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - arm64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.26 vers:intdot/&lt;1.26.2.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.27 vers:intdot/&lt;1.27.1.1 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.28 vers:intdot/&lt;1.28.0.6 (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n<li>Industrial Edge Device Kit - x86-64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 9.1</td>\n<td>Siemens</td>\n<td>Industrial Edge Device Kit - arm64 V1.10</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Path Traversal: '.../...//'</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-44414</div>\n<div class="c-expandable-textbox__body">Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>48 Affected Products</h4>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/35.html">CWE-35 Path Traversal: '.../...//'</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.8</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-44414">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-44415</div>\n<div class="c-expandable-textbox__body">Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>96 Affected Products</h4>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.10</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.11</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.12</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.19</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.20</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.21</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.22</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.23</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.24</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.13</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.25</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.26 &lt; V1.26.2-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.26.2-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.27 &lt; V1.27.1-1</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.27.1-1 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.28 &lt; V1.28.0-6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V1.28.0-6 or later version</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.6</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.7</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - x86-64 V1.9</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.14</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.15</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.16</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.17</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Industrial Edge Device Kit - arm64 V1.18</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Ensure network access to affected products is limited to trusted parties only</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/35.html">CWE-35 Path Traversal: '.../...//'</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>9.1</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-44415">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-377139 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-377139 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Capital Embedded AR Classic", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-04.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</strong></p>\n<p>The following versions of Siemens Capital Embedded AR Classic are affected:</p>\n<ul>\n<li>Capital Embedded AR Classic 431-422 vers:all/* (CVE-2026-89208)</li>\n<li>Capital Embedded AR Classic R20-11 vers:intdot/&lt;2303 (CVE-2026-89208)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 5.3</td>\n<td>Siemens</td>\n<td>Capital Embedded AR Classic 431-422</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Read</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-89208</div>\n<div class="c-expandable-textbox__body">The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>Capital Embedded AR Classic 431-422</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Apply network segmentation and put the ECUs behind properly configured gateways/firewalls</p>\n</div>\n<div>\n<p><strong>No fix planned</strong><br>Currently no fix is planned</p>\n</div>\n<hr>\n<h5>Capital Embedded AR Classic R20-11 &lt; V2303</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Apply network segmentation and put the ECUs behind properly configured gateways/firewalls</p>\n</div>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V2303 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>5.3</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-89208">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-055299 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-055299 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "InterSystems Corporation InterSystems IRIS for Health", "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-295-01.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.</strong></p>\n<p>The following versions of InterSystems Corporation InterSystems IRIS for Health are affected:</p>\n<ul>\n<li>InterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 8.1</td>\n<td>InterSystems Corporation</td>\n<td>InterSystems IRIS for Health</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Cleartext Transmission of Sensitive Information</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Healthcare and Public Health</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>United States</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-111594</div>\n<div class="c-expandable-textbox__body">InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2026.2.0.221</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2026.1.0.235</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h5>InterSystems Corporation InterSystems IRIS for Health: 2025.3.0.226</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems recommends users configure IRIS superserver to require SSL/TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist Note that there are three settings: "Disabled", which means that client communications do not use TLS. "Enabled", which means that client communications may use TLS (but they also may not) and "Required", which forces all client communications to use TLS.</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>InterSystems documentation explains how to configure the server to require TLS: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver</p>\n</div>\n<div>\n<p><strong>Mitigation</strong><br>For more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center: https://wrc.intersystems.com (login required)</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/319.html">CWE-319 Cleartext Transmission of Sensitive Information</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>8.1</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n<tr>\n<td>4.0</td>\n<td>9.2</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-111594">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Abhinav Agarwal reported this vulnerability to CISA and InterSystems Corporation.</li>\n</ul>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<p>CISA also recommends users take the following measures to protect themselves from social engineering attacks:</p>\n<ul type="disc">\n<li>Do not click web links or open attachments in unsolicited email messages.</li>\n<li>Refer to <a href="https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing">Recognizing and Avoiding Email Scams</a> for more information on avoiding email scams.</li>\n<li>Refer to <a href="https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks">Avoiding Social Engineering and Phishing Attacks</a> for more information on social engineering attacks.</li>\n</ul>\n<p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.</p>\n<hr>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-22</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-22</td>\n<td>1</td>\n<td>Initial Publication</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens PSS(R)SINCAL", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-06.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.</strong></p>\n<p>The following versions of Siemens PSS(R)SINCAL are affected:</p>\n<ul>\n<li>PSS(R)SINCAL V21.5 vers:all/* (CVE-2026-84854)</li>\n<li>PSS(R)SINCAL V22.0 vers:all/* (CVE-2026-84854)</li>\n<li>PSS(R)SINCAL V22.5 vers:intdot/&lt;22.5.5 (CVE-2026-84854)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 7</td>\n<td>Siemens</td>\n<td>PSS(R)SINCAL V21.5</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Out-of-bounds Write</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-84854</div>\n<div class="c-expandable-textbox__body">In the WibuKey driver, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>PSS(R)SINCAL V21.5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>PSS(R)SINCAL V22.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Mitigation</strong><br>Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.</p>\n</div>\n<div>\n<p><strong>None available</strong><br>Currently no fix is available</p>\n</div>\n<hr>\n<h5>PSS(R)SINCAL V22.5 &lt; V22.5 Update 5</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V22.5 Update 5 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/787.html">CWE-787 Out-of-bounds Write</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-84854">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design. Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-148322 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-148322 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens Software Center", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-03.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it.</strong></p>\n<p>The following versions of Siemens Software Center are affected:</p>\n<ul>\n<li>Siemens Software Center vers:intdot/&lt;4.0.9.8 (CVE-2026-110936)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 6.7</td>\n<td>Siemens</td>\n<td>Siemens Software Center</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Uncontrolled Search Path Element</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-110936</div>\n<div class="c-expandable-textbox__body">The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>Siemens Software Center &lt; V4.0.9.8</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V4.0.9.8 or later version (All existing versions of SSC will be auto updated on next startup. The latest version can also be downloaded in the respective link)</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/427.html">CWE-427 Uncontrolled Search Path Element</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>6.7</td>\n<td>MEDIUM</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-110936">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported this vulnerability to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-580366 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-15</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-15</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-17</td>\n<td>2</td>\n<td>Added remediation for Siemens Software Center</td>\n</tr>\n<tr>\n<td>2026-10-19</td>\n<td>3</td>\n<td>Added reference to blog post about active exploitation of the vulnerability</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>4</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-580366 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "CISA (US)", "title": "Siemens RUGGEDCOM CROSSBOW Station Access Controller", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "published": "Thu, 22 Oct 26 12:00:00 +0000", "summary": "<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-15.json"><strong>View CSAF</strong></a></p>\n<h2>Summary</h2>\n<p><strong>RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.</strong></p>\n<p>The following versions of Siemens RUGGEDCOM CROSSBOW Station Access Controller are affected:</p>\n<ul>\n<li>RUGGEDCOM CROSSBOW Station Access Controller (SAC) vers:intdot/&lt;6.0 (CVE-2025-6965, CVE-2025-70873, CVE-2025-71316, CVE-2026-11822, CVE-2026-11824)</li>\n</ul>\n<div class="csaf-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>\n<th role="columnheader">Vendor</th>\n<th role="columnheader">Equipment</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>v3 9.8</td>\n<td>Siemens</td>\n<td>RUGGEDCOM CROSSBOW Station Access Controller (SAC)</td>\n</tr>\n</tbody>\n</table>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">4 Vulnerabilities</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Numeric Truncation Error, Improper Clearing of Heap Memory Before Release ('Heap Inspection'), Improper Handling of Unicode Encoding, Heap-based Buffer Overflow</td>\n</tr>\n</tbody>\n</table>\n</div>\n<h3>Background</h3>\n<ul>\n<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>\n<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>\n<li><strong>Company Headquarters Location: </strong>Germany</li>\n</ul>\n<hr>\n<h2>Vulnerabilities</h2>\n<div class="icsa-etb-toggle-wrapper"><a class="icsa-etb-toggle-all" href="#">Expand All +</a></div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-6965</div>\n<div class="c-expandable-textbox__body">There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>1 Affected Product</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/197.html">CWE-197 Numeric Truncation Error</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.7</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-6965">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-70873</div>\n<div class="c-expandable-textbox__body">An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>2 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/244.html">CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.5</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-70873">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2025-71316</div>\n<div class="c-expandable-textbox__body">SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker could use the '-L' option to load an arbitrary DLL with a crafted command line argument string that results in command line file arguments being misinterpreted as command line options. Fixed on or around 2025-12-26.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>3 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/176.html">CWE-176 Improper Handling of Unicode Encoding</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>9.8</td>\n<td>CRITICAL</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2025-71316">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-11822</div>\n<div class="c-expandable-textbox__body">SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>4 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/122.html">CWE-122 Heap-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-11822">View CVE Details</a></p>\n</div>\n</div>\n<div class="c-expandable-textbox icsa-etb">\n<div class="c-expandable-textbox__title">CVE-2026-11824</div>\n<div class="c-expandable-textbox__body">SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.</div>\n<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>\n<div class="c-expandable-textbox__body2">\n<h4>5 Affected Products</h4>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h5>RUGGEDCOM CROSSBOW Station Access Controller (SAC) &lt; V6.0</h5>\n<div>\n<p>Product Status: known_affected</p>\n</div>\n<h6>Remediations</h6>\n<div>\n<p><strong>Vendor fix</strong><br>Update to V6.0 or later version</p>\n</div>\n<hr>\n<h6>Additional Metrics</h6>\n<p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/122.html">CWE-122 Heap-based Buffer Overflow</a></p>\n<div class="csaf-table csaf-metrics-table">\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>\n<th role="columnheader">Base Score</th>\n<th role="columnheader">Base Severity</th>\n<th role="columnheader">Vector String</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>3.1</td>\n<td>7.8</td>\n<td>HIGH</td>\n<td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>\n</tr>\n</tbody>\n</table>\n</div>\n<hr>\n<p><a href="https://www.cve.org/CVERecord?id=CVE-2026-11824">View CVE Details</a></p>\n</div>\n</div>\n<hr>\n<h2>Acknowledgments</h2>\n<ul>\n<li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>\n</ul>\n<hr>\n<h2>General Recommendations</h2>\n<p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>\n<hr>\n<h2>Additional Resources</h2>\n<p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>\n<hr>\n<h2>Terms of Use</h2>\n<p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>\n<hr>\n<h2>Recommended Practices</h2>\n<p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.</p>\n<ul type="disc">\n<li>Minimize network exposure for all control system devices and/or systems, ensuring they are <a href="https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01">not accessible from the internet</a>.</li>\n<li>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</li>\n<li>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</li>\n</ul>\n<p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>\n<p>CISA also provides a section for <a href="https://www.cisa.gov/resources-tools/resources/ics-recommended-practices">control systems security recommended practices</a> on the ICS webpage on <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a>. Several CISA products detailing cyber defense best practices are available for reading and download, including <a href="https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf">Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies</a>.</p>\n<p>CISA encourages organizations to implement recommended cybersecurity strategies for <a href="https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf">proactive defense of ICS assets</a>.</p>\n<p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at <a href="https://www.cisa.gov/topics/industrial-control-systems">cisa.gov/ics</a> in the technical information paper, <a href="https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b">ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies</a>.</p>\n<p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>\n<hr>\n<h2>Advisory Conversion Disclaimer</h2>\n<p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-765416 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>\n<h2>Revision History</h2>\n<ul>\n<li><strong>Initial Release Date: </strong>2026-10-13</li>\n</ul>\n<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>\n<thead>\n<tr>\n<th role="columnheader" data-tablesaw-priority="persist">Date</th>\n<th role="columnheader">Revision</th>\n<th role="columnheader">Summary</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>2026-10-13</td>\n<td>1</td>\n<td>Publication Date</td>\n</tr>\n<tr>\n<td>2026-10-22</td>\n<td>2</td>\n<td>Initial CISA Republication of Siemens ProductCERT SSA-765416 advisory</td>\n</tr>\n</tbody>\n</table>\n<hr>\n<h2>Legal Notice and Terms of Use</h2>"}, {"source": "NCSC (UK)", "title": "Problema di sicurezza critico che interessa PHP", "url": "https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php", "published": "Wed, 21 Oct 2026 12:00:00 +0000", "summary": "Aggiornamento: l'NCSC incoraggia le organizzazioni del Regno Unito ad adottare misure immediate per mitigare una problematica di sicurezza che interessa PHP (CVE-2026-109618 e CVE-2026-109619)."}, {"source": "NCSC (UK)", "title": "Introduzione di un nuovo capitolo sull'IA nel libro dei problemi di ricerca del NCSC", "url": "https://www.ncsc.gov.uk/blogs/introducing-new-ai-chapter-ncsc-research-problem-book", "published": "Tue, 20 Oct 2026 12:00:00 +0000", "summary": "Una rivoluzione è in corso all'intersezione tra intelligenza artificiale e sicurezza informatica."}, {"source": "NCSC (UK)", "title": "Utilizzo di TLS per la protezione dei dati", "url": "https://www.ncsc.gov.uk/guidance/using-tls-to-protect-data", "published": "Thu, 15 Oct 2026 12:00:00 +0000", "summary": "Profili consigliati per configurare in modo sicuro TLS per le versioni e gli scenari più comuni, con indicazioni aggiuntive per la gestione delle versioni più datate."}, {"source": "NCSC (UK)", "title": "Aggiornamenti post-quantistici alle nostre linee guida TLS", "url": "https://www.ncsc.gov.uk/blogs/post-quantum-updates-to-our-tls-guidance", "published": "Thu, 15 Oct 2026 12:00:00 +0000", "summary": "Il NCSC pubblica le sue raccomandazioni per la configurazione della crittografia post-quantistica in TLS. Ora è il momento di migrare."}, {"source": "NCSC (UK)", "title": "Aiutare il NCSC a capire come le organizzazioni affrontano il rischio della superficie di attacco esterna", "url": "https://www.ncsc.gov.uk/blogs/help-ncsc-understand-how-organisations-approach-external-attack-surface-risk", "published": "Mon, 12 Oct 2026 12:00:00 +0000", "summary": "Cerchiamo di ricevere feedback da persone coinvolte nella valutazione, selezione o adozione di EASM."}, {"source": "NCSC (UK)", "title": "Attori malevoli legati alla Cina denunciati da partner del Regno Unito e internazionali per aver preso di mira dati sensibili a livello globale", "url": "https://www.ncsc.gov.uk/news/china-linked-actors-called-out-by-uk-and-international-partners-for-targeting-sensitive-data", "published": "Thu, 08 Oct 2026 12:00:00 +0000", "summary": "Il comunicato congiunto con i partner internazionali evidenzia il targeting malevolo di organizzazioni di diversi settori in tutto il mondo."}, {"source": "NCSC (UK)", "title": "Incidente che interessa i clienti di ASOS", "url": "https://www.ncsc.gov.uk/news/incident-affecting-asos-customers", "published": "Tue, 06 Oct 2026 12:00:00 +0000", "summary": "ASOS ha dichiarato di stare indagando su un incidente informatico e che alcune informazioni personali dei clienti potrebbero essere state accessate."}, {"source": "NCSC (UK)", "title": "Sfruttamento di vulnerabilità che interessano Citrix NetScaler ADC e Citrix NetScaler Gateway", "url": "https://www.ncsc.gov.uk/news/exploitation-of-vulnerabilities-affecting-citrix-netscaler-adc-and-citrix-netscaler-gateway", "published": "Mon, 28 Sep 2026 12:00:00 +0000", "summary": "Il NCSC sta esortando le organizzazioni del Regno Unito a mitigare tempestivamente le vulnerabilità che interessano Citrix NetScaler ADC e Gateway, di cui due sono attivamente sfruttate."}, {"source": "NCSC (UK)", "title": "Non si difende semplicemente in modo agentico", "url": "https://www.ncsc.gov.uk/blogs/one-does-not-simply-defend-agentically", "published": "Mon, 21 Sep 2026 12:00:00 +0000", "summary": "I difensori non possono utilizzare l'IA nello stesso modo degli aggressori, ma c'è molto che possono fare per sbloccare il potenziale della difesa cibernetica agentica."}, {"source": "NCSC (UK)", "title": "Simulazione dell'avversario: cosa è necessario sapere", "url": "https://www.ncsc.gov.uk/guidance/adversary-simulation-what-you-need-to-know", "published": "Thu, 17 Sep 2026 12:00:00 +0000", "summary": "La simulazione dell'avversario ('red teaming') mette alla prova la tua capacità di prevenire, rilevare e rispondere agli attacchi informatici."}, {"source": "NCSC (UK)", "title": "Cyber Adversary Simulation (CyAS): documenti di schema ora disponibili", "url": "https://www.ncsc.gov.uk/blogs/cyber-adversary-simulation-cyas-scheme-documents-now-available", "published": "Thu, 17 Sep 2026 12:00:00 +0000", "summary": "La nostra visione della buona simulazione degli avversari informatici – e come i fornitori certificati possono fornirla."}, {"source": "NCSC (UK)", "title": "Targeting cibernetico iraniano di dissidenti, attivisti e giornalisti", "url": "https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists", "published": "Tue, 15 Sep 2026 12:00:00 +0000", "summary": "Avviso sul malware CHOSEN BRICK, inclusa l'analisi tecnica e i consigli per aiutare individui e organizzazioni a proteggersi."}, {"source": "NCSC (UK)", "title": "Il Regno Unito e gli alleati svelano lo spyware utilizzato da attori statali iraniani per prendere di mira dissidenti, attivisti e giornalisti", "url": "https://www.ncsc.gov.uk/news/uk-allies-expose-spyware-iranian-state-actors-target-dissidents-activists-journalists", "published": "Tue, 15 Sep 2026 12:00:00 +0000", "summary": "Il Regno Unito e gli alleati forniscono consigli per aiutare le organizzazioni e gli individui a rischio a rilevare e contrastare la minaccia del malware CHOSEN BRICK."}, {"source": "NCSC (UK)", "title": "I rischi nascosti dell'AI ombra", "url": "https://www.ncsc.gov.uk/blogs/the-hidden-risks-of-shadow-ai", "published": "Mon, 07 Sep 2026 12:00:00 +0000", "summary": "Comprendere perché il personale utilizza strumenti di AI non approvati è fondamentale per gestire le sfide di sicurezza che possono creare."}, {"source": "NCSC (UK)", "title": "Attività cibernetica disruptiva evidenzia il rischio derivante da sistemi esposti su Internet e dispositivi edge", "url": "https://www.ncsc.gov.uk/news/disruptive-cyber-activity-highlights-risk-from-internet-exposed-systems-and-edge-devices", "published": "Thu, 27 Aug 2026 12:00:00 +0000", "summary": "I titolari di tecnologie operative sono incoraggiati ad affrontare le vulnerabilità evitabili e a costruire una resilienza informatica a lungo termine."}, {"source": "SANS ISC (US)", "title": "Rilascio di YARA-X 1.22.0, (Sun, Oct 25th)", "url": "https://isc.sans.edu/diary/rss/33454", "published": "Sun, 25 Oct 2026 19:57:53 GMT", "summary": "

Il rilascio di YARA-X&#;x26;#;39;s 1.22.0 introduce 11 miglioramenti e 9 correzioni di bug.

"}, {"source": "SANS ISC (US)", "title": "(Affidabile)? Sfruttabilità di php2shell, (ven, 23 ott)", "url": "https://isc.sans.edu/diary/rss/33452", "published": "Fri, 23 Oct 2026 20:04:47 GMT", "summary": "

Ieri tutti erano in preda al panico (incluso io :) a causa della vulnerabilità php2shell.

"}, {"source": "SANS ISC (US)", "title": "Riepilogo delle vulnerabilità PHP, (ven, 23 ott)", "url": "https://isc.sans.edu/diary/rss/33450", "published": "Fri, 23 Oct 2026 13:43:20 GMT", "summary": "

Questa mattina, siamo tornati allo stato Infocon Verde. Come di consueto, stiamo alzando l'Infocon per avvisarvi di situazioni emergenti che richiedono attenzione immediata. PHP rientrava in questa descrizione. A questo punto, o ne siete già a conoscenza, o probabilmente non lo sarete mai, quindi è il momento di tornare alla \"normalità\".

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Friday, October 23rd, 2026 https://isc.sans.edu/podcastdetail/10148, (Fri, Oct 23rd)", "url": "https://isc.sans.edu/diary/rss/33448", "published": "Fri, 23 Oct 2026 10:25:11 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licenza Creative Commons Attribution-Noncommercial 3.0 Stati Uniti."}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)", "url": "https://isc.sans.edu/diary/rss/33446", "published": "Thu, 22 Oct 2026 02:00:02 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licenza Creative Commons Attribution-Noncommercial 3.0 Stati Uniti."}, {"source": "SANS ISC (US)", "title": "Vulnerabilità critica in PHP (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)", "url": "https://isc.sans.edu/diary/rss/33440", "published": "Wed, 21 Oct 2026 21:02:43 GMT", "summary": "

PHP.net ha annunciato che rilascerà un aggiornamento critico oggi. Abbiamo deciso di cambiare lo stato infoCon a GIALLO a causa dell'ampio utilizzo di PHP, della gravità prevista del difetto (CVSS 9.4) e della disponibilità di exploit PoC anticipati prima che la patch diventasse disponibile.

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)", "url": "https://isc.sans.edu/diary/rss/33438", "published": "Wed, 21 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licenza Creative Commons Attribution-Noncommercial 3.0 Stati Uniti."}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)", "url": "https://isc.sans.edu/diary/rss/33436", "published": "Tue, 20 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licenza Creative Commons Attribution-Noncommercial 3.0 Stati Uniti."}, {"source": "SANS ISC (US)", "title": "Progetti VBA orfani all'interno di file DWG: Regola YARA, (Sun, Oct 18th)", "url": "https://isc.sans.edu/diary/rss/33434", "published": "Sun, 18 Oct 2026 12:59:30 GMT", "summary": "

Ecco la regola YARA che ho utilizzato per rilevare \"Progetti VBA Orfani all'interno dei File DWG\".

"}, {"source": "SANS ISC (US)", "title": "ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)", "url": "https://isc.sans.edu/diary/rss/33432", "published": "Fri, 16 Oct 2026 02:00:03 GMT", "summary": "(c) SANS Internet Storm Center. https://isc.sans.edu Licenza Creative Commons Attribution-Noncommercial 3.0 Stati Uniti."}], "industry": [{"title": "L'esecuzione di PHP2Shell colpisce un'entità governativa in mezzo allo scanning globale e ai segni di hacking assistito dall'IA", "why": "I threat actor stanno utilizzando l'AI agentica per accelerare le attività post-sfruttamento contro le critiche vulnerabilità RCE in PHP, con un'entità governativa compromessa entro due ore dall'accesso iniziale.", "url": "https://thehackernews.com/2026/10/php2shell-exploitation-hits-government.html", "source": "The Hacker News"}, {"title": "Vulnerabilità SSH non corrette in Tailscale potrebbero consentire a un dispositivo compromesso di ottenere privilegi root su altri server", "why": "Un ricercatore di sicurezza ha identificato una configurazione errata critica in Tailscale SSH che consente il movimento laterale e l'escalation dei privilegi a root su altri nodi di rete se il port forwarding è abilitato.", "url": "https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html", "source": "The Hacker News"}, {"title": "Il difetto nel decoder Brotli dietro l'RCE di Node.js interessa anche Bun, Python e altri software ampiamente utilizzati", "why": "Una vulnerabilità di corruzione della memoria nel decoder Brotli di Google (CVE-2026-111497) interessa un'ampia gamma di stack software popolari, rappresentando un rischio significativo per l'esecuzione remota di codice tramite dati compressi manipolati.", "url": "https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html", "source": "The Hacker News"}, {"title": "CISA segnala due difetti critici sfruttati attivamente in Collabora Online e Arista VeloCloud", "why": "CISA ha aggiunto due vulnerabilità critiche al suo catalogo delle Vulnerabilità Note Sfruttate, indicando uno sfruttamento attivo in-the-wild di difetti in Collabora Online e Arista VeloCloud Orchestrator.", "url": "https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html", "source": "The Hacker News"}, {"title": "BlackX UEFI Bootkit aggira Secure Boot sui sistemi Windows patchati privi di revocazioni", "why": "Kaspersky riporta un nuovo bootkit UEFI che prende di mira organizzazioni diplomatiche in Asia centrale e che aggira Secure Boot sui sistemi che non hanno applicato specifiche revocazioni di certificati.", "url": "https://thehackernews.com/2026/10/blackx-uefi-bootkit-bypasses-secure.html", "source": "The Hacker News"}, {"title": "eMudhra si ritira dal mercato globale dei certificati TLS dopo la compromissione delle chiavi di firma CA", "why": "La compromissione di otto CA intermedie con chiavi private ridicolmente deboli sta costringendo a una migrazione di massa dei certificati TLS, evidenziando lacune critiche nella gestione dei trust store di terze parti per sistemi Java e non browser.", "url": "https://www.csoonline.com/article/4239634/emudhra-quits-global-tls-certificate-market-after-compromise-of-ca-signing-keys-2.html", "source": "CSO Online"}, {"title": "I team di sicurezza sono invitati a centrare la difesa sul profilo di vulnerabilità più spesso bersagliato dagli attaccanti", "why": "I dati di Rapid7 mostrano che gli attaccanti stanno trasformando in armi vulnerabilità remote, non autenticate e zero-click entro 72 ore, rendendo necessario un passaggio dalla patching mensile a una triage immediata basata sul rischio per le CVE di alta gravità.", "url": "https://www.csoonline.com/article/4239255/security-teams-urged-to-center-defense-on-the-single-profile-attackers-target-most.html", "source": "CSO Online"}, {"title": "Possibile nuovo zero-day radio di iPhone per Cellebrite", "why": "Un documento trapelato suggerisce che Cellebrite abbia sviluppato una nuova funzionalità \"Advanced Unlocks\" che opera contro la Protezione del Dispositivo Rubato tramite un'apparecchiatura dedicata, suscitando significative preoccupazioni riguardo alla sicurezza fisica e allo sfruttamento di zero-day.", "url": "https://www.schneier.com/blog/archives/2026/10/possible-new-cellebrite-iphone-radio-zero-day.html", "source": "Schneier on Security"}], "iocs": [{"ioc": "ae1241f4a4787c0362285f91657c4f91722345c78bd8b986f8f5e88d6db6083c", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "Mirai", "confidence_level": 100, "first_seen": "2026-10-26 02:55:44 UTC", "reference": null}, {"ioc": "014e2e634bfdfc4ca6600898ad3d3ade92fcea86c9018c50bd057ef9baf8582a", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:43 UTC", "reference": null}, {"ioc": "f1d7fda8e42f2f6376d2e2ed4192b291a882ba29c5bc55b0745e218c10074896", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:42 UTC", "reference": null}, {"ioc": "7cc069a862258bd7ebfcaebf5bff72cc9ffbcb10e5ddb514a92dbf08f10d94fe", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:41 UTC", "reference": null}, {"ioc": "2b5b0ba9685b09277c3fee6c19e3ded60e57a72418f2550f2b1e43e00e1aebe8", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:40 UTC", "reference": null}, {"ioc": "fea6e379e5864f824165cd54548ec905672862fbe3cabfd04b7c59bb691541e6", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:39 UTC", "reference": null}, {"ioc": "a4389db74221b51ac7b1d60e30c954c20f639af06e2aefd79a57c1b3b137cd02", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:37 UTC", "reference": null}, {"ioc": "2e093d09ceb674fe47e130112dd38e753acedf1fec9e947149a7a2ca7d584fdb", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:36 UTC", "reference": null}, {"ioc": "deb1f5d8b7de5fe4b2370147a0a7871867b07edb2b72c2fec4ff191526fb0126", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:35 UTC", "reference": null}, {"ioc": "e28df40dc234353fbc06390833e0305a2e7bcd150e324cf9b0812d0ccc27d932", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:34 UTC", "reference": null}, {"ioc": "f2c33bee5bb42be519c8735151349bcbf8d91a749be7604ad5c970054195831f", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:33 UTC", "reference": null}, {"ioc": "70473b5416d501b66e4976a352dab4a8d19080bd4a2d8e5bc86a7b48209d3020", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:32 UTC", "reference": null}, {"ioc": "09f365cc415195f75e5aaa64137bb02d11d605e8c37b2783b93a383575ef4907", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:31 UTC", "reference": null}, {"ioc": "b8ab7dcb982eb6c2889bda259d85c8cd86001cad2b8ee22aa58662415e3012c4", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:30 UTC", "reference": null}, {"ioc": "e0fabbd75a800c5c18bab1a50d8225a0282c18f966acd76e4a4a914163940d14", "ioc_type": "sha256_hash", "threat_type": "payload", "malware": "SalatStealer", "confidence_level": 95, "first_seen": "2026-10-26 02:55:29 UTC", "reference": null}], "iobs": [{"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-110447", "attack_technique": null}, {"behaviour": "OS command injection", "based_on": "CWE-78", "cve": "CVE-2026-110447", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-106931", "attack_technique": null}, {"behaviour": "OS command injection", "based_on": "CWE-78", "cve": "CVE-2026-106931", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96654", "attack_technique": null}, {"behaviour": "exploitation of Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability", "based_on": "CWE-84", "cve": "CVE-2026-96654", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96652", "attack_technique": null}, {"behaviour": "server-side request forgery (SSRF) callbacks", "based_on": "CWE-918", "cve": "CVE-2026-96652", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96656", "attack_technique": null}, {"behaviour": "exploitation of Plex Media Server External Control of File Name or Path Vulnerability", "based_on": "CWE-73", "cve": "CVE-2026-96656", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-96655", "attack_technique": null}, {"behaviour": "server-side request forgery (SSRF) callbacks", "based_on": "CWE-918", "cve": "CVE-2026-96655", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-114625", "attack_technique": null}, {"behaviour": "SQL injection", "based_on": "CWE-89", "cve": "CVE-2026-114625", "attack_technique": null}, {"behaviour": "Active exploitation in the wild (CISA KEV)", "based_on": "KEV", "cve": "CVE-2026-110936", "attack_technique": null}, {"behaviour": "exploitation of Siemens Software Center Uncontrolled Search Path Element Vulnerability", "based_on": "CWE-427", "cve": "CVE-2026-110936", "attack_technique": null}], "sources_failed": [], "quiet_week": false, "byline": "Curated for you by Geek with the Peak", "_text_model": "dgx/vllm/qwen3.8-27b-nvfp4", "rubric_verdict": "APPROVE", "rubric_reasons": [], "rubric_judge": "m3/mlx/qwen3-coder-next-4bit", "language": "it", "translated_by": "dgx/vllm/qwen3.8-27b-nvfp4", "source_language": "en"}