Is CVE-2026-10207 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-10207

Update to the latest Siemens software versions for affected products. Where fixes are not yet available, apply network segmentation and place controllers behind properly configured gateways or firewalls. Monitor Siemens security advisories for updates on patch availability.

Quick answers

What is CVE-2026-10207?: Update to the latest Siemens software versions for affected products. Where fixes are not yet available, apply network segmentation and place controllers behind properly configured gateways or firewalls. Monitor Siemens security advisories for updates on patch availability.
How severe is CVE-2026-10207?: high, CVSS 8.2
Is CVE-2026-10207 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-10207 be mitigated?: Update to the latest Siemens software versions for affected products. Where fixes are not yet available, apply network segmentation and place controllers behind properly configured gateways or firewalls. Monitor Siemens security advisories for updates on patch availability.

CVSS

8.2

Vendor

Siemens

Published

Oct 24, 2026 · 05:32

Patch

Unknown / not confirmed

Affected products

APOGEE MBC (PPC) BACnet, APOGEE MBC (PPC) P2 Ethernet, APOGEE MEC (PPC) BACnet, APOGEE MEC (PPC) P2 Ethernet, APOGEE PXC Compact (BACnet), APOGEE PXC Compact (P2 Ethernet), APOGEE PXC Modular (BACnet), APOGEE PXC Modular (P2 Ethernet), TALON TC Compact (BACnet), TALON TC Modular (BACnet), Desigo PXC00-E.D >= V2.3, Desigo PXC00-U >= V2.3, Desigo PXC001-E.D >= V2.3, Desigo PXC100-E.D >= V2.3, Desigo PXC12-E.D >= V2.3, Desigo PXC128-U >= V2.3, Desigo PXC200-E.D >= V2.3, Desigo PXC22-E.D >= V2.3, Desigo PXC22.1-E.D >= V2.3, Desigo PXC36.1-E.D >= V2.3, Desigo PXC50-E.D >= V2.3, Desigo PXC64-U >= V2.3, Desigo PXM20-E >= V2.3

Mitigation

Siemens Releases Security Updates for Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products

Siemens has identified multiple vulnerabilities across its APOGEE, TALON and Desigo PXC/PXM product lines. Four CVEs (CVE-2026-102073 through CVE-2026-102076) affect BACnet and P2 Ethernet implementations in APOGEE MBC, MEC, PXC Compact, PXC Modular and TALON TC products, potentially enabling denial of service conditions. A fifth CVE, CVE-2026-89208, affects various Desigo PXC and PXM models and involves improper input validation that could allow unauthenticated remote attackers to trigger memory reads outside intended packet boundaries. Siemens has released updated versions and recommends network segmentation as a mitigation where fixes are not yet available.

12m

CVE-2026-10207

Quick answers

Related News

Siemens Releases Security Updates for Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products