CVE-2026-44414: Siemens Industrial Edge unauthorized API access

CVE-2026-44414 · Severity: high · CVSS 6.8 · Published 2026-10-13

Siemens Industrial Edge products, which manage edge computing and IoT connectivity for industrial systems, fail to properly restrict access to internal APIs for authenticated users. An attacker with valid credentials could access sensitive internal information and potentially escalate privileges to gain unauthorized system access, risking exposure of operational data and control systems.

Technologies: Siemens SIMATIC IPC BX-21A, Siemens SIMATIC IPC BX-39A, Siemens SIMATIC IPC BX-59A, Siemens SIMATIC IPC127E, Siemens SIMATIC IPC227E, Siemens SIMATIC IPC227G. Vendors: Siemens.

Quick answers

Is CVE-2026-44414 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-44414 being exploited in the wild.
How severe is CVE-2026-44414?
High severity, with a CVSS score of 6.8, published 13 October 2026.
Which products and versions are affected?
Siemens Industrial Edge Device Kit - arm64 V1.5 through V1.28; Siemens Industrial Edge Device Kit - x86-64 V1.5 through V1.28.
Is there a fix for CVE-2026-44414?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-44414 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-44414?
Check whether you run Siemens Industrial Edge Cloud Device, Siemens Industrial Edge Device Kit - arm64, Siemens Industrial Edge Device Kit - x86-64 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is an authorization bypass in internal API access controls affecting multiple Siemens Industrial Edge products. Authenticated remote attackers can bypass access restrictions to internal APIs and paths, potentially exposing sensitive system information. A fix is available in newer versions of the affected products.

Affected products

  • Siemens Industrial Edge Cloud Device
  • Siemens Industrial Edge Device Kit - arm64 V1.5 through V1.28
  • Siemens Industrial Edge Device Kit - x86-64 V1.5 through V1.28
  • Siemens Industrial Edge Own Device
  • Siemens Industrial Edge Virtual Device
  • Siemens SCALANCE LPE9413
  • Siemens SCALANCE LPE9433
  • Siemens SIMATIC IoT2050 Advanced IED
  • Siemens SIMATIC IoT2050 SM IED
  • Siemens SIMATIC IPC BX-21A
  • Siemens SIMATIC IPC BX-39A
  • Siemens SIMATIC IPC BX-59A
  • Siemens SIMATIC IPC127E
  • Siemens SIMATIC IPC227E
  • Siemens SIMATIC IPC227G
  • Siemens SIMATIC IPC427E
  • Siemens SIMATIC IPC847E

Identifiers

  • CVE-2026-44414
  • CVE-2026-44415

Timeline

  • 2026-10-13: disclosed

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.