Is CVE-2026-89208 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-89208 being exploited in the wild.

How severe is CVE-2026-89208?

High severity, with a CVSS score of 5.3, published 13 October 2026.

Which products and versions are affected?

Siemens Capital Embedded AR Classic 431-422 All versions; Siemens Capital Embedded AR Classic R20-11 All versions < V2303.

How is CVE-2026-89208 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-89208?

Check whether you run Siemens Capital Embedded AR Classic 431-422 or Siemens Capital Embedded AR Classic R20-11 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-89208: Siemens Capital Embedded AR out-of-bounds read in packet handling

Q: Is there a fix for CVE-2026-89208?

Yes: fixed in Capital Embedded AR Classic R20-11: V2303 or later. Until then: Apply network segmentation and place controllers behind properly configured gateways and firewalls to restrict remote access to affected devices. [ { "kind": "disclosed", "at": "2026-10-13" } ] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

CVE-2026-89208 · Severity: high · CVSS 5.3 · Published 2026-10-13

Capital Embedded AR Classic is a software platform for embedded automotive systems that processes network packets. An unauthenticated attacker can send specially crafted network packets to trigger memory reads outside intended boundaries, potentially causing abnormal behavior, system instability, or denial of service.

Vendors: Siemens.

Quick answers

Is CVE-2026-89208 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-89208 being exploited in the wild.
How severe is CVE-2026-89208?: High severity, with a CVSS score of 5.3, published 13 October 2026.
Which products and versions are affected?: Siemens Capital Embedded AR Classic 431-422 All versions; Siemens Capital Embedded AR Classic R20-11 All versions < V2303.
Is there a fix for CVE-2026-89208?: Yes: fixed in Capital Embedded AR Classic R20-11: V2303 or later. Until then: Apply network segmentation and place controllers behind properly configured gateways and firewalls to restrict remote access to affected devices.</anigation> <parameter name="timeline">[ { "kind": "disclosed", "at": "2026-10-13" } ] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-89208 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-89208?: Check whether you run Siemens Capital Embedded AR Classic 431-422 or Siemens Capital Embedded AR Classic R20-11 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Capital Embedded AR Classic R20-11: V2303 or later

Apply network segmentation and place controllers behind properly configured gateways and firewalls to restrict remote access to affected devices.</anigation> <parameter name="timeline">[ { "kind": "disclosed", "at": "2026-10-13" } ]

Technical details

An out-of-bounds read vulnerability exists in packet data handling due to improper input bounds validation. The vulnerability is triggered by network-based packet processing without authentication required, allowing an attacker to read memory outside the intended packet boundaries. A fix has been released only for Capital Embedded AR Classic R20-11 (V2303+); no fix is planned for the 431-422 version.

Affected products

Siemens Capital Embedded AR Classic 431-422 All versions
Siemens Capital Embedded AR Classic R20-11 All versions < V2303

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.