Vendor
Siemens vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 483 vulnerabilities in Siemens: 5 in the last 7 days and 59 in the last 90 days, 63 of them critical and 11 exploited in the wild. The most recent, CVE-2026-59082, was published on 10 November 2026. 37 vulnerabilities in the last four weeks, up 3600% on the four before (1). 5 critical against 0, 1 exploited in the wild against 0. 116 technologies have a page of their own.
- Last 7 days
- 5
- Last 90 days
- 59
- Critical, all time
- 63
- Exploited in the wild
- 11
About Siemens
German multinational conglomerate specializing in automation, digitalization, and electrification technologies.
Siemens technologies
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP204
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP83
- Siemens SIMATIC CN 410079
- Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP70
- Siemens RUGGEDCOM APE180828
- Siemens Ruggedcom Rox II16
- Siemens RUGGEDCOM RST2428P16
- Siemens ROX II14
- Siemens RUGGEDCOM CROSSBOW13
- Siemens SINEC OS12
- Siemens Solid Edge12
- Siemens SIMATIC Drive Controller CPU 1504D TF11
- Siemens SIMATIC Drive Controller CPU 1507D TF11
- Siemens SIMATIC S7-1500 TM MFP GNU/Linux subsystem11
- Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN10
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC210
- Siemens Reyrolle 7SR59
- Siemens SIMATIC ET 200SP CPU 1510SP-1 PN9
- Siemens SIMATIC ET 200SP CPU 1512SP-1 PN9
- Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN9
- Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN9
- Siemens Simatic Cn 4100 Firmware7
- Siemens SIMATIC S7-1500 CPU family7
- Siemens Simcenter Femap7
- Siemens Ruggedcom Rox Ii Firmware6
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC6
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V45
- Siemens SIMATIC PCS neo5
- Siemens SIMATIC S7-1500 TM MFP5
- Siemens APOGEE MBC (PPC) (BACnet)4
- Siemens APOGEE MBC (PPC) (P2 Ethernet)4
- Siemens APOGEE MEC (PPC) (BACnet)4
- Siemens APOGEE MEC (PPC) (P2 Ethernet)4
- Siemens APOGEE PXC Compact (BACnet)4
- Siemens APOGEE PXC Compact (P2 Ethernet)4
- Siemens APOGEE PXC Modular (BACnet)4
- Siemens APOGEE PXC Modular (P2 Ethernet)4
- Siemens CPCI85 Central Processing/Communication4
- Siemens RUGGEDCOM ROX MX50004
- Siemens RUGGEDCOM ROX MX5000RE4
- Siemens RUGGEDCOM ROX RX14004
- Siemens RUGGEDCOM ROX RX15004
- Siemens RUGGEDCOM ROX RX15014
- Siemens RUGGEDCOM ROX RX15104
- Siemens RUGGEDCOM ROX RX15114
- Siemens RUGGEDCOM ROX RX15124
- Siemens RUGGEDCOM ROX RX15244
- Siemens RUGGEDCOM ROX RX15364
- Siemens RUGGEDCOM ROX RX50004
- Siemens SCALANCE XR-5004
- Siemens SICORE Base system4
- Siemens SIMATIC IPC BX-21A4
- Siemens SIMATIC IPC227G4
- Siemens SINEC INS4
- Siemens TALON TC Compact (BACnet)4
- Siemens TALON TC Modular (BACnet)4
- Siemens User Management Component4
- Siemens RUGGEDCOM APE1808 Virtual NGFW3
- Siemens SCALANCE XC-3003
- Siemens SCALANCE XC-4003
- Siemens SCALANCE XR-3003
- Siemens SCALANCE XR-500WG3
- Siemens SIMATIC IPC BX-39A3
- Siemens SIMATIC IPC BX-59A3
- Siemens SIMATIC IPC RW-543A3
- Siemens SIMATIC IPC127E3
- Siemens SIMATIC IPC227E3
- Siemens SIMATIC IPC277G3
- Siemens SIMATIC IPC277G PRO3
- Siemens SIMATIC IPC327G3
- Siemens SIMATIC WinCC3
- Siemens Sipass Integrated3
- Siemens SIPROTEC 5 6MD84 (CP300)3
- Siemens SIPROTEC 5 6MD85 (CP200)3
- Siemens SIPROTEC 5 6MD85 (CP300)3
- Siemens SIPROTEC 5 6MD86 (CP200)3
- Siemens SIPROTEC 5 6MD86 (CP300)3
- Siemens SIPROTEC 5 6MD89 (CP300)3
- Siemens SIPROTEC 5 6MU85 (CP300)3
- Siemens SIPROTEC 5 7KE85 (CP200)3
- Siemens SIPROTEC 5 7KE85 (CP300)3
- Siemens SIPROTEC 5 7SA82 (CP100)3
- Siemens SIPROTEC 5 7SA82 (CP150)3
- Siemens SIPROTEC 5 7SA86 (CP200)3
- Siemens SIPROTEC 5 7SA86 (CP300)3
- Siemens SIPROTEC 5 7SA87 (CP200)3
- Siemens SIPROTEC 5 7SA87 (CP300)3
- Siemens SIPROTEC 5 7SD82 (CP100)3
- Siemens SIPROTEC 5 7SD82 (CP150)3
- Siemens SIPROTEC 5 7SD86 (CP200)3
- Siemens SIPROTEC 5 7SD86 (CP300)3
- Siemens SIPROTEC 5 7SD87 (CP200)3
- Siemens SIPROTEC 5 7SD87 (CP300)3
- Siemens SIPROTEC 5 7SJ81 (CP100)3
- Siemens SIPROTEC 5 7SJ81 (CP150)3
- Siemens SIPROTEC 5 7SJ82 (CP100)3
- Siemens SIPROTEC 5 7SJ82 (CP150)3
- Siemens SIPROTEC 5 7SJ85 (CP300)3
- Siemens SIPROTEC 5 7SJ86 (CP300)3
- Siemens SIPROTEC 5 7SK82 (CP100)3
- Siemens SIPROTEC 5 7SK82 (CP150)3
- Siemens SIPROTEC 5 7SK85 (CP300)3
- Siemens SIPROTEC 5 7SL82 (CP100)3
- Siemens SIPROTEC 5 7SL82 (CP150)3
- Siemens SIPROTEC 5 7SL86 (CP300)3
- Siemens SIPROTEC 5 7SL87 (CP300)3
- Siemens SIPROTEC 5 7SS85 (CP300)3
- Siemens SIPROTEC 5 7ST85 (CP300)3
- Siemens SIPROTEC 5 7ST86 (CP300)3
- Siemens SIPROTEC 5 7SX82 (CP150)3
- Siemens SIPROTEC 5 7SX85 (CP300)3
- Siemens SIPROTEC 5 7SY82 (CP150)3
- Siemens SIPROTEC 5 7UM85 (CP300)3
- Siemens SIPROTEC 5 7UT82 (CP100)3
- Siemens SIPROTEC 5 7UT82 (CP150)3
- Siemens Teamcenter3
Latest Siemens vulnerabilities
- CVE-2026-59082: Siemens SIMATIC WinCC implicit active content execution vulnerabilityhighCVSS 7.8
- CVE-2026-58114: Siemens SIMATIC NTLM authentication relay vulnerabilityhighCVSS 7.5
- CVE-2026-112136: Mendix Studio Pro MCP Server unrestricted HTTP listenerhighCVSS 8.8
- CVE-2026-109830: Siemens meta-iot2050 command injection in firmware updatehighCVSS 7.3
- CVE-2026-109097: Siemens ROS# code injection in message definition parsinghighCVSS 8.2
- CVE-2026-89209: Mendix SAML authentication bypass in IdP-initiated SSOhighCVSS 6.8
- CVE-2024-7322: Siemens SENTRON 3NA COM Fuse denial-of-servicehigh
- CVE-2026-110936: Siemens Software Center DLL sideloading vulnerabilitycriticalexploited in the wildCVSS 6.7EPSS 0.1%
- CVE-2026-0319: Palo Alto Networks PAN-OS GlobalProtect session hijackinginfoEPSS 0.3%
- CVE-2026-0321: Palo Alto Networks PAN-OS denial of service in network servicesinfoEPSS 0.3%
- CVE-2026-89208: Siemens Capital Embedded AR out-of-bounds read in packet handlinghighCVSS 5.3EPSS 0.4%
- CVE-2026-89206: Siemens RUGGEDCOM CROSSBOW authorization bypass in scheduled actionsmediumCVSS 6.3EPSS 0.3%
- CVE-2026-89205: Siemens RUGGEDCOM CROSSBOW authorization bypass and SQL injectionmediumCVSS 6.3EPSS 0.3%
- CVE-2026-89204: Siemens RUGGEDCOM CROSSBOW SQL injection in database queriesmediumCVSS 5.4EPSS 0.2%
- CVE-2026-89203: Siemens RUGGEDCOM CROSSBOW privilege escalation and SQL injectionmediumCVSS 4.3EPSS 0.3%
- CVE-2026-89202: Siemens RUGGEDCOM CROSSBOW authorization bypass in session disconnectionmediumCVSS 6.5EPSS 0.4%
- CVE-2026-89201: Siemens RUGGEDCOM CROSSBOW SQL injection in Bulk ExporthighCVSS 7.5EPSS 0.4%
- CVE-2026-89200: Siemens RUGGEDCOM CROSSBOW SQL injection in custom file labelsmediumCVSS 6.7EPSS 0.2%
- CVE-2026-89199: Siemens RUGGEDCOM CROSSBOW improper access restrictionhighCVSS 8.8EPSS 0.3%
- CVE-2026-89198: Siemens RUGGEDCOM CROSSBOW SQL injection in firmware filenamehighCVSS 8.8EPSS 0.4%
- CVE-2026-89197: Siemens RUGGEDCOM CROSSBOW SQL injection in notification conditionshighCVSS 8.8EPSS 0.4%
- CVE-2026-89196: Siemens RUGGEDCOM CROSSBOW SQL injection and authorization flawshighCVSS 8.8EPSS 0.4%
- CVE-2026-85115: Siemens .NET Client Library SIMATIC S7 Webserver API information disclosuremediumCVSS 5.5EPSS 0.1%
- CVE-2026-85114: Siemens .NET Client Library for SIMATIC S7 Webserver API path traversalhighCVSS 7.5EPSS 0.4%
- CVE-2026-78557: Siemens Industrial Edge App Publisher XSS and RCE via unescaped backend datahighCVSS 8.3EPSS 0.4%
Most severe Siemens vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-59718: Fortinet Multiple Products auth bypass via improper SAML signature verificationcriticalexploited in the wildCVSS 9.8EPSS 9.5%
- CVE-2025-10585: Google Chrome type confusion in V8 enginecriticalexploited in the wildCVSS 9.8EPSS 5.4%
- CVE-2026-24858: Fortinet Multiple Products authentication bypass in FortiCloud SSOcriticalexploited in the wildCVSS 9.8EPSS 4.8%
- CVE-2025-39682: Linux Kernel memory corruption in TLS zero-length record handlingcriticalexploited in the wildCVSS 9.8EPSS 2.9%
- CVE-2025-13223: Google Chrome type confusion in V8 enginecriticalexploited in the wildCVSS 8.8EPSS 4.8%
- CVE-2025-25249: Fortinet FortiOS heap overflow in cw_acd daemoncriticalexploited in the wildCVSS 8.1EPSS 3.9%
- CVE-2026-31431: Linux Kernel crypto algif_aead improper memory handlingcriticalexploited in the wildCVSS 7.8EPSS 2.6%
- CVE-2016-8562: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerabilitycriticalexploited in the wildCVSS 7.5
- CVE-2026-110936: Siemens Software Center DLL sideloading vulnerabilitycriticalexploited in the wildCVSS 6.7EPSS 0.1%
- CVE-2025-61624: Fortinet multiple products path traversal in CLIcriticalexploited in the wildCVSS 6EPSS 0.6%
Vulnerabilities per week
37 vulnerabilities in the last four weeks, up 3600% on the four before (1). 5 critical against 0, 1 exploited in the wild against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 1 | 1 | |
| 24 Aug 2026 | 1 | 0 | |
| 31 Aug 2026 | 1 | 0 | |
| 7 Sep 2026 | 13 | 2 | |
| 14 Sep 2026 | 1 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 35 | 5 | |
| 19 Oct 2026 | 1 | 0 | |
| 26 Oct 2026 | 1 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 5 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Siemens vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/siemens)<a href="https://junglewise.ai/threats/vendors/siemens"><img src="https://junglewise.ai/threats/vendors/siemens/badge.svg" alt="Siemens vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/siemens.json, and this page as text at https://junglewise.ai/threats/vendors/siemens.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Siemens vulnerabilities", https://junglewise.ai/threats/vendors/siemens, 13 November 2026.