Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting

A cross-site scripting vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. id: CVE-2014-2908 info: name: Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting author:...

CVE-2026-58115

-red?style=flat-square Check · Exploit · Detection · PCAP · Impact · Write-up Disclaimer: This tool is provided for authorized security testing and educational purposes only. Only use against systems you own or have explicit written permission to test. Unauthorized access to computer systems is...

node-red-scanner

node-red-scanner Local triage for CVE-2026-58115, the 10.0 missing-authentication flaw in Node-RED on Siemens SIMATIC IoT2050 Advanced gateways. Give it an Industrial OS version you own, or a settings.js file you own, and it tells you whether that install is still open. It never touches the...

Vulnerabilities fixed in Siemens products

Siemens has addressed vulnerabilities in various products such as SIMATIC and COMOS. These vulnerabilities allow malicious actors to carry out attacks that may result in the following types of damage: - Denial-of-Service DoS - Manipulation, alteration, or deletion of data - Bypassing of security...

CVE-2026-58114

A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions, SIMATIC Information Server 2022 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC Process Historian 2020 All versions, SIMATIC Process Historian 2022 All versions, SIMATIC...

CVE-2026-59082

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...

CVE-2026-59082

A vulnerability exists in SIMATIC WinCC V7.5 (All versions) , SIMATIC WinCC V8.0 (All versions) , and SIMATIC WinCC V8.1 (All versions) . The issue is caused by the software implicitly executing active content when opening files, which could allow an attacker to trick a user into executing arbitr...

CVE-2026-59082

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...

EUVD-2026-120887

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...

CVE-2026-58114

A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions, SIMATIC Information Server 2022 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC Process Historian 2020 All versions, SIMATIC Process Historian 2022 All versions, SIMATIC...

EUVD-2026-120886

A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions, SIMATIC Information Server 2022 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC Process Historian 2020 All versions, SIMATIC Process Historian 2022 All versions, SIMATIC...

CVE-2026-58114

Multiple Siemens products, including SIMATIC BATCH V9.1 , SIMATIC Information Server (2020/2022) , SIMATIC PCS 7 V9.1 , SIMATIC Process Historian (2020/2022) , and various versions of SIMATIC WinCC (V7.5 through V8.1) and WinCC Runtime Professional (V17 through V21) , are vulnerable due to improp...

CVE-2026-58114

A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions, SIMATIC Information Server 2022 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC Process Historian 2020 All versions, SIMATIC Process Historian 2022 All versions, SIMATIC...

PT-2026-141599

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...

CVE-2026-58114: Siemens: A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All…

A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions, SIMATIC Information Server 2022 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC Process Historian 2020 All versions, SIMATIC Process Historian 2022 All versions, SIMATIC...

PT-2026-141598

Name of the Vulnerable Software and Affected Versions SIMATIC BATCH V9.1 SIMATIC Information Server 2020 SIMATIC Information Server 2022 SIMATIC PCS 7 V9.1 SIMATIC Process Historian 2020 SIMATIC Process Historian 2022 SIMATIC WinCC Runtime Professional V17 SIMATIC WinCC Runtime Professional V18...

CVE-2026-59082: Siemens: A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC…

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions, SIMATIC WinCC V8.1 All versions. Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device...

Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerability, tracked as CVE-2026-58115 CVSS score: 10.0, is a case of missing authentication for a critical function that could be exploited by an...

Exploit for CVE-2026-58115

node-red-scanner Local triage for CVE-2026-58115, the 10...

VulnCheck KEV: CVE-2026-58115

A vulnerability has been identified in SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 All versions V4.3.4-1 running Industrial OS with Node-RED installed, SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 All versions running Example Image versions with Node-RED installed, SIMATIC IoT2050 Basic...