en
Siemens is a multinational technology and engineering group offering industrial software, automation, and digitalization solutions; its PLM and visualization tools serve global manufacturing and engineering communities. It maintains a broad, enterprise-scale footprint across industries.
As of 09/13/2026, Siemens recorded 43 security vulnerabilities in the last 90 days across 86 products, including 35 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Reyrolle 7SR5 had the most security vulnerabilities in the Siemens ecosystem, with 9 vulnerabilities—approximately 20.93% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-67367 | Exploitation statusNot known exploited | FixYes | Affected productSIMOVE Fleetmanager V3.1 | Published09/08/2026 | SeverityCritical |
CVE-2026-62654 | Exploitation statusNot known exploited | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityHigh |
CVE-2026-62653 | Exploitation statusNot confirmed | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityHigh |
CVE-2026-62652 | Exploitation statusNot known exploited | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityMedium |
CVE-2026-62650 | Exploitation statusNot known exploited | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityHigh |
CVE-2026-62649 | Exploitation statusNot known exploited | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityHigh |
CVE-2026-62648 | Exploitation statusNot known exploited | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityHigh |
CVE-2026-62647 | Exploitation statusNot confirmed | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityCritical |
CVE-2026-62646 | Exploitation statusNot known exploited | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityCritical |
CVE-2026-62645 | Exploitation statusNot known exploited | FixYes | Affected productReyrolle 7SR5 | Published09/08/2026 | SeverityCritical |
CVE-2026-58113 | Exploitation statusNot known exploited | FixYes | Affected productTeamcenter V2412 | Published09/08/2026 | SeverityHigh |
CVE-2026-50093 | Exploitation statusNot known exploited | FixYes | Affected productSiveillance Control Pro V3.0 | Published09/08/2026 | SeverityHigh |
CVE-2026-34223 | Exploitation statusNot confirmed | FixNot confirmed | Affected productDesigo CC ClickOnce Client V6 | Published09/08/2026 | SeverityHigh |
CVE-2026-80465 | Exploitation statusNot known exploited | FixYes | Affected productMendix SAML (Mendix 10 compatible) | Published09/03/2026 | SeverityHigh |
CVE-2026-66155 | Exploitation statusNot known exploited | FixYes | Affected productElement maps-ng V47 | Published08/27/2026 | SeverityHigh |
CVE-2026-54548kas: Persistent SSH Host Key Checking Disablement | Exploitation statusNot known exploited | FixYes | Affected productkas | Published08/26/2026 | SeverityLow |
CVE-2026-18963Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat build of Keycloak 26.4 | Published08/18/2026 | SeverityCritical |
CVE-2026-47192kas's late signature validation may allow unnoticed repository manipulations | Exploitation statusNot known exploited | FixNot confirmed | Affected productkas | Published08/14/2026 | SeverityLow |
CVE-2026-47191kas checks out SHA-like git branches as valid commits | Exploitation statusNot known exploited | FixNot confirmed | Affected productkas | Published08/14/2026 | SeverityLow |
CVE-2026-69109 | Exploitation statusNot known exploited | FixYes | Affected productSiemens License Server (SLS) | Published08/11/2026 | SeverityHigh |
CVE-2026-69108 | Exploitation statusNot known exploited | FixYes | Affected productSiemens License Server (SLS) | Published08/11/2026 | SeverityHigh |
CVE-2026-64629 | Exploitation statusNot known exploited | FixYes | Affected productParasolid V38.0 | Published08/11/2026 | SeverityHigh |
CVE-2026-59701 | Exploitation statusNot known exploited | FixYes | Affected productSimcenter Femap | Published08/11/2026 | SeverityHigh |
CVE-2026-59700 | Exploitation statusNot known exploited | FixYes | Affected productSimcenter Femap | Published08/11/2026 | SeverityHigh |
CVE-2026-59693 | Exploitation statusNot known exploited | FixYes | Affected productDesigo DXR2 | Published08/11/2026 | SeverityMedium |
CVE-2026-59086 | Exploitation statusNot known exploited | FixYes | Affected productSimcenter Femap | Published08/11/2026 | SeverityHigh |
CVE-2026-58115 | Exploitation statusNot known exploited | FixYes | Affected productSIMATIC IoT2050 Advanced | Published08/11/2026 | SeverityCritical |
CVE-2026-57263 | Exploitation statusNot known exploited | FixYes | Affected productLOGO! Soft Comfort | Published08/11/2026 | SeverityHigh |
CVE-2026-57262 | Exploitation statusNot known exploited | FixYes | Affected productLOGO! Soft Comfort | Published08/11/2026 | SeverityHigh |
CVE-2026-50064 | Exploitation statusNot known exploited | FixYes | Affected productSolid Edge SE2025 | Published08/11/2026 | SeverityHigh |
CVE-2026-50063 | Exploitation statusNot known exploited | FixYes | Affected productSolid Edge SE2025 | Published08/11/2026 | SeverityHigh |
CVE-2026-50062 | Exploitation statusNot known exploited | FixYes | Affected productSolid Edge SE2025 | Published08/11/2026 | SeverityHigh |
CVE-2026-50061 | Exploitation statusNot known exploited | FixYes | Affected productSolid Edge SE2025 | Published08/11/2026 | SeverityHigh |
CVE-2026-50060 | Exploitation statusNot known exploited | FixYes | Affected productSolid Edge SE2025 | Published08/11/2026 | SeverityHigh |
CVE-2026-50059 | Exploitation statusNot known exploited | FixYes | Affected productSolid Edge SE2025 | Published08/11/2026 | SeverityHigh |
CVE-2026-50058 | Exploitation statusNot known exploited | FixYes | Affected productSolid Edge SE2025 | Published08/11/2026 | SeverityHigh |
CVE-2026-64560posix-cpu-timers: Prevent UAF caused by non-leader exec() race | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/29/2026 | SeverityHigh |
CVE-2026-64552virtio-net: fix len check in receive_big() | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/27/2026 | SeverityHigh |
CVE-2026-64545net, bpf: check master for NULL in xdp_master_redirect() | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/27/2026 | SeverityHigh |
CVE-2026-64538ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/27/2026 | SeverityUnknown |
CVE-2026-64425io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityUnknown |
CVE-2026-64423ipv4: igmp: remove multicast group from hash table on device destruction | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityHigh |
CVE-2026-64422net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityHigh |
CVE-2026-64413netfilter: ebtables: zero chainstack array | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityHigh |
CVE-2026-64412netfilter: ebtables: module names must be null-terminated | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityHigh |
CVE-2026-64411netfilter: ebtables: terminate table name before find_table_lock() | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityHigh |
CVE-2026-64375proc: protect ptrace_may_access() with exec_update_lock (FD links) | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityHigh |
CVE-2026-64371proc: protect ptrace_may_access() with exec_update_lock (part 1) | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityUnknown |
CVE-2026-64370posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityUnknown |
CVE-2026-64317isofs: bound Rock Ridge symlink components to the SL record | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityHigh |
CVE-2026-64279i2c: core: fix adapter deregistration race | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/25/2026 | SeverityHigh |
CVE-2026-63810block: Avoid mounting the bdev pseudo-filesystem in userspace | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/19/2026 | SeverityUnknown |
CVE-2026-53400i2c: core: fix adapter registration race | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/19/2026 | SeverityHigh |
CVE-2026-59840 | Exploitation statusNot known exploited | FixYes | Affected productFortiOS | Published07/14/2026 | SeverityMedium |
CVE-2025-43892 | Exploitation statusNot known exploited | FixYes | Affected productFortiOS | Published07/14/2026 | SeverityMedium |
CVE-2026-23573 | Exploitation statusNot known exploited | FixYes | Affected productFortiOS | Published07/14/2026 | SeverityMedium |
CVE-2026-59839 | Exploitation statusNot known exploited | FixYes | Affected productFortiProxy | Published07/14/2026 | SeverityMedium |
CVE-2025-62826 | Exploitation statusNot known exploited | FixYes | Affected productFortiPAM | Published07/14/2026 | SeverityLow |
CVE-2025-62675 | Exploitation statusNot known exploited | FixYes | Affected productFortiOS | Published07/14/2026 | SeverityLow |
CVE-2026-59837 | Exploitation statusNot known exploited | FixYes | Affected productFortiPAM | Published07/14/2026 | SeverityMedium |
CVE-2026-3014Remote Code Execution by administrative user on the Management Server | Exploitation statusNot known exploited | FixYes | Affected productXProtect Management Server | Published07/14/2026 | SeverityMedium |
CVE-2026-56451 | Exploitation statusNot known exploited | FixYes | Affected productOpcenter X | Published07/14/2026 | SeverityCritical |
CVE-2026-54429 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSIMATIC S7-PLCSIM Advanced | Published07/14/2026 | SeverityMedium |
CVE-2025-40945 | Exploitation statusNot known exploited | FixYes | Affected productCOMOS V10.4.5 | Published07/14/2026 | SeverityHigh |
CVE-2026-0279PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities | Exploitation statusNot known exploited | FixYes | Affected productPAN-OS | Published07/09/2026 | SeverityLow |
CVE-2026-0280PAN-OS: IPv6 Firewall Policy Bypass | Exploitation statusNot known exploited | FixYes | Affected productPAN-OS | Published07/09/2026 | SeverityLow |
CVE-2026-0281PAN-OS: Information Disclosure Vulnerability in Management Web Interface | Exploitation statusNot known exploited | FixYes | Affected productPAN-OS | Published07/09/2026 | SeverityLow |
CVE-2026-0282PAN-OS: File Deletion Vulnerability in Management Web Interface | Exploitation statusNot known exploited | FixYes | Affected productPAN-OS | Published07/09/2026 | SeverityLow |
CVE-2026-0283PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) | Exploitation statusNot known exploited | FixYes | Affected productPAN-OS | Published07/09/2026 | SeverityMedium |
CVE-2026-0284PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) | Exploitation statusNot known exploited | FixYes | Affected productPAN-OS | Published07/09/2026 | SeverityMedium |
CVE-2026-0285PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface | Exploitation statusNot known exploited | FixYes | Affected productPAN-OS | Published07/09/2026 | SeverityMedium |
CVE-2026-0286PAN-OS: Authenticated Command Injection in CLI | Exploitation statusNot known exploited | FixYes | Affected productPAN-OS | Published07/09/2026 | SeverityMedium |
CVE-2026-0287PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing | Exploitation statusNot known exploited | FixYes | Affected productCloud NGFW | Published07/09/2026 | SeverityMedium |
CVE-2026-54801 | Exploitation statusNot known exploited | FixYes | Affected productCPCI85 Central Processing/Communication | Published07/09/2026 | SeverityHigh |
CVE-2026-54800 | Exploitation statusNot known exploited | FixYes | Affected productCPCI85 Central Processing/Communication | Published07/09/2026 | SeverityMedium |
CVE-2026-54799 | Exploitation statusNot known exploited | FixYes | Affected productCPCI85 Central Processing/Communication | Published07/09/2026 | SeverityHigh |
CVE-2026-54798 | Exploitation statusNot known exploited | FixYes | Affected productCPCI85 Central Processing/Communication | Published07/09/2026 | SeverityHigh |
CVE-2026-33390Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 | Exploitation statusNot known exploited | FixYes | Affected productGuardian | Published07/09/2026 | SeverityHigh |
CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.0 | Exploitation statusNot known exploited | FixYes | Affected productGuardian | Published07/09/2026 | SeverityHigh |
CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 | Exploitation statusNot known exploited | FixYes | Affected productGuardian | Published07/09/2026 | SeverityMedium |
CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 | Exploitation statusNot known exploited | FixYes | Affected productGuardian | Published07/09/2026 | SeverityMedium |
CVE-2026-31981HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0 | Exploitation statusNot known exploited | FixYes | Affected productGuardian | Published07/09/2026 | SeverityMedium |
CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent | Exploitation statusNot known exploited | FixYes | Affected productCloud NGFW | Published07/08/2026 | SeverityHigh |
CVE-2026-53352signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published07/01/2026 | SeverityUnknown |
CVE-2026-48192 | Exploitation statusNot known exploited | FixYes | Affected productMendix Studio Pro 10.11 | Published06/30/2026 | SeverityMedium |
CVE-2026-53295mailbox: add sanity check for channel array | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/26/2026 | SeverityUnknown |
CVE-2026-53275ipv6: mcast: Fix use-after-free when processing MLD queries | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityHigh |
CVE-2026-53269netfilter: synproxy: add mutex to guard hook reference counting | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityUnknown |
CVE-2026-53268netfilter: conntrack_irc: fix possible out-of-bounds read | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityHigh |
CVE-2026-53249ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityUnknown |
CVE-2026-53239xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityHigh |
CVE-2026-53236tcp: restrict SO_ATTACH_FILTER to priv users | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityUnknown |
CVE-2026-53223net: guard timestamp cmsgs to real error queue skbs | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityHigh |
CVE-2026-53219netfilter: x_tables: avoid leaking percpu counter pointers | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityUnknown |
CVE-2026-53218netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityUnknown |
CVE-2026-53134netfilter: nft_fib: fix stale stack leak via the OIFNAME register | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/25/2026 | SeverityUnknown |
CVE-2026-53050quota: Fix race of dquot_scan_active() with quota deactivation | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/24/2026 | SeverityHigh |
CVE-2026-53012nexthop: fix IPv6 route referencing IPv4 nexthop | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/24/2026 | SeverityUnknown |
CVE-2026-53006ipv6: fix possible UAF in icmpv6_rcv() | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/24/2026 | SeverityCritical |
CVE-2026-53002netfilter: conntrack: remove sprintf usage | Exploitation statusNot confirmed | FixYes | Affected productLinux | Published06/24/2026 | SeverityCritical |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
.svg){kind=icon}
.svg){kind=icon}
