What’s Vulnerable › Vulnerabilities
CVE-2026-44415
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-13 · updated 2026-10-15
- Weakness: CWE-35
Description
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Affected products
- Siemens Industrial Edge Device Kit - arm64 V1.10: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.11: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.12: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.13: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.14: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.15: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.16: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.17: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.18: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.19: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.20: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.21: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.22: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.23: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.24: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.25: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.26: before V1.26.2-1 — fixed in V1.26.2-1
- Siemens Industrial Edge Device Kit - arm64 V1.27: before V1.27.1-1 — fixed in V1.27.1-1
- Siemens Industrial Edge Device Kit - arm64 V1.28: before V1.28.0-6 — fixed in V1.28.0-6
- Siemens Industrial Edge Device Kit - arm64 V1.5: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.6: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.7: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.8: all versions
- Siemens Industrial Edge Device Kit - arm64 V1.9: all versions
- Siemens Industrial Edge Device Kit - x86-64 V1.10: all versions
- Siemens Industrial Edge Device Kit - x86-64 V1.11: all versions
- Siemens Industrial Edge Device Kit - x86-64 V1.12: all versions
- Siemens Industrial Edge Device Kit - x86-64 V1.13: all versions
- Siemens Industrial Edge Device Kit - x86-64 V1.14: all versions
- Siemens Industrial Edge Device Kit - x86-64 V1.15: all versions
How to fix
Upgrade to a fixed version: Siemens Industrial Edge Device Kit - arm64 V1.26 V1.26.2-1; Siemens Industrial Edge Device Kit - arm64 V1.27 V1.27.1-1; Siemens Industrial Edge Device Kit - arm64 V1.28 V1.28.0-6; Siemens Industrial Edge Device Kit - x86-64 V1.26 V1.26.2-1; Siemens Industrial Edge Device Kit - x86-64 V1.27 V1.27.1-1; Siemens Industrial Edge Device Kit - x86-64 V1.28 V1.28.0-6. Check the vendor advisory for mitigations.
References
- https://cert-portal.siemens.com/productcert/html/ssa-377139.html
- https://cert-portal.siemens.com/productcert/html/ssa-832641.html
Get alerted when CVE-2026-44415 or the next vulnerability affects your stack