CVE-2026-44415

Received
Published: 13 Oct 2026, 09:18
Last modified:13 Oct 2026, 09:18

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
v3.1 (cve.org)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Oct 2026, 09:18
Published
Vulnerability first disclosed

Description

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.

CVSS Metrics

  • v4.0•HIGH•Score: 8.9CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
  • v4.0•HIGH•Score: 8.9CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • v3.1•CRITICAL•Score: 9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Techniques & Countermeasures

  • CWE-35•Path Traversal: '.../...//'

    The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.

Affected Systems

  • siemens•industrial edge device kit - arm64 v1.10

    < *

  • siemens•industrial edge device kit - arm64 v1.11

    < *

  • siemens•industrial edge device kit - arm64 v1.12

    < *

  • siemens•industrial edge device kit - arm64 v1.13

    < *

  • siemens•industrial edge device kit - arm64 v1.14

    < *

  • siemens•industrial edge device kit - arm64 v1.15

    < *

  • siemens•industrial edge device kit - arm64 v1.16

    < *

  • siemens•industrial edge device kit - arm64 v1.17

    < *

  • siemens•industrial edge device kit - arm64 v1.18

    < *

  • siemens•industrial edge device kit - arm64 v1.19

    < *

  • siemens•industrial edge device kit - arm64 v1.20

    < *

  • siemens•industrial edge device kit - arm64 v1.21

    < *

  • siemens•industrial edge device kit - arm64 v1.22

    < *

  • siemens•industrial edge device kit - arm64 v1.23

    < *

  • siemens•industrial edge device kit - arm64 v1.24

    < *

  • siemens•industrial edge device kit - arm64 v1.25

    < *

  • siemens•industrial edge device kit - arm64 v1.26

    < V1.26.2-1

  • siemens•industrial edge device kit - arm64 v1.27

    < V1.27.1-1

  • siemens•industrial edge device kit - arm64 v1.28

    < V1.28.0-6

  • siemens•industrial edge device kit - arm64 v1.5

    < *

  • siemens•industrial edge device kit - arm64 v1.6

    < *

  • siemens•industrial edge device kit - arm64 v1.7

    < *

  • siemens•industrial edge device kit - arm64 v1.8

    < *

  • siemens•industrial edge device kit - arm64 v1.9

    < *

  • siemens•industrial edge device kit - x86-64 v1.10

    < *

  • siemens•industrial edge device kit - x86-64 v1.11

    < *

  • siemens•industrial edge device kit - x86-64 v1.12

    < *

  • siemens•industrial edge device kit - x86-64 v1.13

    < *

  • siemens•industrial edge device kit - x86-64 v1.14

    < *

  • siemens•industrial edge device kit - x86-64 v1.15

    < *

  • siemens•industrial edge device kit - x86-64 v1.16

    < *

  • siemens•industrial edge device kit - x86-64 v1.17

    < *

  • siemens•industrial edge device kit - x86-64 v1.18

    < *

  • siemens•industrial edge device kit - x86-64 v1.19

    < *

  • siemens•industrial edge device kit - x86-64 v1.20

    < *

  • siemens•industrial edge device kit - x86-64 v1.21

    < *

  • siemens•industrial edge device kit - x86-64 v1.22

    < *

  • siemens•industrial edge device kit - x86-64 v1.23

    < *

  • siemens•industrial edge device kit - x86-64 v1.24

    < *

  • siemens•industrial edge device kit - x86-64 v1.25

    < *

  • siemens•industrial edge device kit - x86-64 v1.26

    < V1.26.2-1

  • siemens•industrial edge device kit - x86-64 v1.27

    < V1.27.1-1

  • siemens•industrial edge device kit - x86-64 v1.28

    < V1.28.0-6

  • siemens•industrial edge device kit - x86-64 v1.5

    < *

  • siemens•industrial edge device kit - x86-64 v1.6

    < *

  • siemens•industrial edge device kit - x86-64 v1.7

    < *

  • siemens•industrial edge device kit - x86-64 v1.8

    < *

  • siemens•industrial edge device kit - x86-64 v1.9

    < *

  • siemens•simatic hmi mtp1000 unified comfort panel

    < *

  • siemens•simatic hmi mtp1000 unified comfort panel hygienic

    < *

Showing first 50 affected entries in server-rendered view.

References (2)