{"schema_version":1,"title":"Siemens SIMATIC S7-1500 CPU family vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 5 vulnerabilities in Siemens SIMATIC S7-1500 CPU family: 0 in the last 7 days and 0 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-25789, was published on 12 May 2026.","url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-family","json_url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-family.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-family","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":5,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":4},"latest":[{"cve":"CVE-2026-25789","cvss":7.1,"epss":0.0027,"slug":"cve-2026-25789-siemens-simatic-s7-plcs-xss-in-firmware-update-page","title":"Siemens SIMATIC S7 PLCs XSS in Firmware Update page","severity":"high","exploited":false,"published_at":"2026-05-12T10:16:45.037+00:00","url":"https://junglewise.ai/threats/cve-2026-25789-siemens-simatic-s7-plcs-xss-in-firmware-update-page"},{"cve":"CVE-2026-25787","cvss":9.1,"epss":0.0037,"slug":"cve-2026-25787-siemens-simatic-s7-plcs-xss-in-motion-control-diagnostics","title":"Siemens SIMATIC S7 PLCs XSS in Motion Control Diagnostics","severity":"critical","exploited":false,"published_at":"2026-05-12T10:16:44.61+00:00","url":"https://junglewise.ai/threats/cve-2026-25787-siemens-simatic-s7-plcs-xss-in-motion-control-diagnostics"},{"cve":"CVE-2026-25786","cvss":9.1,"epss":0.0037,"slug":"cve-2026-25786-siemens-simatic-s7-plcs-stored-xss-in-communication-parameters","title":"Siemens SIMATIC S7 PLCs stored XSS in communication parameters page","severity":"critical","exploited":false,"published_at":"2026-05-12T10:16:44.193+00:00","url":"https://junglewise.ai/threats/cve-2026-25786-siemens-simatic-s7-plcs-stored-xss-in-communication-parameters"},{"cve":"CVE-2025-66382","cvss":2.9,"epss":0.0001,"slug":"cve-2025-66382-libexpat-inefficient-algorithmic-complexity-denial-of-service","title":"libexpat inefficient algorithmic complexity denial of service","severity":"low","exploited":false,"published_at":"2025-11-28T07:15:57.9+00:00","url":"https://junglewise.ai/threats/cve-2025-66382-libexpat-inefficient-algorithmic-complexity-denial-of-service"},{"cve":"CVE-2024-33599","cvss":8.1,"slug":"cve-2024-33599-gnu-glibc-nscd-stack-based-buffer-overflow-in-netgroup-cache","title":"GNU glibc nscd stack-based buffer overflow in netgroup cache","severity":"high","exploited":false,"published_at":"2024-05-06T20:15:11.437+00:00","url":"https://junglewise.ai/threats/cve-2024-33599-gnu-glibc-nscd-stack-based-buffer-overflow-in-netgroup-cache"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","slug":"simatic-s7-1500-cpu-1518-4-pn-dp-mfp","vulnerabilities":204,"url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518-4-pn-dp-mfp"},{"name":"Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","slug":"simatic-s7-1500-cpu-1518f-4-pn-dp-mfp","vulnerabilities":83,"url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518f-4-pn-dp-mfp"},{"name":"Siemens SIMATIC CN 4100","slug":"simatic-cn-4100","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/simatic-cn-4100"},{"name":"Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","slug":"siplus-s7-1500-cpu-1518-4-pn-dp-mfp","vulnerabilities":70,"url":"https://junglewise.ai/threats/technologies/siplus-s7-1500-cpu-1518-4-pn-dp-mfp"},{"name":"Siemens RUGGEDCOM APE1808","slug":"ruggedcom-ape1808","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/ruggedcom-ape1808"},{"name":"Siemens RUGGEDCOM RST2428P","slug":"ruggedcom-rst2428p","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/ruggedcom-rst2428p"},{"name":"Siemens ROX II","slug":"rox-ii","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/rox-ii"},{"name":"Siemens SINEC OS","slug":"sinec-os","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/sinec-os"},{"name":"Siemens Solid Edge","slug":"solid-edge","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/solid-edge"},{"name":"Siemens SIMATIC S7-1500 TM MFP GNU/Linux subsystem","slug":"simatic-s7-1500-tm-mfp-gnu-linux-subsystem","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-tm-mfp-gnu-linux-subsystem"},{"name":"Siemens Ruggedcom Rox II","slug":"ruggedcom-rox-ii","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/ruggedcom-rox-ii"},{"name":"Siemens Reyrolle 7SR5","slug":"reyrolle-7sr5","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/reyrolle-7sr5"}],"technology":{"hub":true,"name":"Siemens SIMATIC S7-1500 CPU family","slug":"simatic-s7-1500-cpu-family","vendor":{"name":"Siemens","slug":"siemens","url":"https://junglewise.ai/threats/vendors/siemens"},"aliases":[],"category":"firmware","homepage":"https://www.siemens.com/global/en/products/automation/systems/industrial/plc/simatic-s7-1500.html","description":"A series of advanced programmable logic controllers designed for complex automation tasks in industrial environments.","url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-family"},"most_severe":[{"cve":"CVE-2026-25787","cvss":9.1,"epss":0.0037,"slug":"cve-2026-25787-siemens-simatic-s7-plcs-xss-in-motion-control-diagnostics","title":"Siemens SIMATIC S7 PLCs XSS in Motion Control Diagnostics","severity":"critical","exploited":false,"published_at":"2026-05-12T10:16:44.61+00:00","url":"https://junglewise.ai/threats/cve-2026-25787-siemens-simatic-s7-plcs-xss-in-motion-control-diagnostics"},{"cve":"CVE-2026-25786","cvss":9.1,"epss":0.0037,"slug":"cve-2026-25786-siemens-simatic-s7-plcs-stored-xss-in-communication-parameters","title":"Siemens SIMATIC S7 PLCs stored XSS in communication parameters page","severity":"critical","exploited":false,"published_at":"2026-05-12T10:16:44.193+00:00","url":"https://junglewise.ai/threats/cve-2026-25786-siemens-simatic-s7-plcs-stored-xss-in-communication-parameters"},{"cve":"CVE-2024-33599","cvss":8.1,"slug":"cve-2024-33599-gnu-glibc-nscd-stack-based-buffer-overflow-in-netgroup-cache","title":"GNU glibc nscd stack-based buffer overflow in netgroup cache","severity":"high","exploited":false,"published_at":"2024-05-06T20:15:11.437+00:00","url":"https://junglewise.ai/threats/cve-2024-33599-gnu-glibc-nscd-stack-based-buffer-overflow-in-netgroup-cache"},{"cve":"CVE-2026-25789","cvss":7.1,"epss":0.0027,"slug":"cve-2026-25789-siemens-simatic-s7-plcs-xss-in-firmware-update-page","title":"Siemens SIMATIC S7 PLCs XSS in Firmware Update page","severity":"high","exploited":false,"published_at":"2026-05-12T10:16:45.037+00:00","url":"https://junglewise.ai/threats/cve-2026-25789-siemens-simatic-s7-plcs-xss-in-firmware-update-page"},{"cve":"CVE-2025-66382","cvss":2.9,"epss":0.0001,"slug":"cve-2025-66382-libexpat-inefficient-algorithmic-complexity-denial-of-service","title":"libexpat inefficient algorithmic complexity denial of service","severity":"low","exploited":false,"published_at":"2025-11-28T07:15:57.9+00:00","url":"https://junglewise.ai/threats/cve-2025-66382-libexpat-inefficient-algorithmic-complexity-denial-of-service"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}