Siemens recommends contacting customer support for detailed fix information. Follow Fortinet advisory for workarounds. CISA advises minimizing network exposure, placing control systems behind firewalls, and using updated VPNs for remote access.
Quick answers
What is CVE-2026-23573?
Siemens recommends contacting customer support for detailed fix information. Follow Fortinet advisory for workarounds. CISA advises minimizing network exposure, placing control systems behind firewalls, and using updated VPNs for remote access.
How severe is CVE-2026-23573?
medium, CVSS 6.1
Is CVE-2026-23573 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2026-23573 be mitigated?
Siemens recommends contacting customer support for detailed fix information. Follow Fortinet advisory for workarounds. CISA advises minimizing network exposure, placing control systems behind firewalls, and using updated VPNs for remote access.
CVSS
6.1
Vendor
Siemens
Published
Sep 30, 2026 · 08:05
Patch
Unknown / not confirmed
Affected products
Siemens RUGGEDCOM APE1808
Mitigation
Siemens recommends contacting customer support for detailed fix information. Follow Fortinet advisory for workarounds. CISA advises minimizing network exposure, placing control systems behind firewalls, and using updated VPNs for remote access.
Siemens has identified that the RUGGEDCOM APE1808 industrial gateway, when deployed with Fortinet NGFW, is affected by two vulnerabilities originally documented in Fortinet products. CVE-2026-23573 is a cross-site scripting flaw rated MEDIUM (CVSS 3.1: 6.1), and CVE-2026-59839 is a path traversal vulnerability also rated MEDIUM (CVSS 3.1: 5.5). Both vulnerabilities were reported to CISA by Siemens ProductCERT. Siemens recommends contacting customer support for detailed remediation information and advises following Fortinet's advisory for workarounds.