Is CVE-2026-33391 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-33391

Until a vendor patch is available, organizations should: restrict access to RUGGEDCOM APE1808 management interfaces to trusted networks; enforce strong authentication and least-privilege user accounts; monitor for suspicious dashboard import activity; implement network segmentation to limit man-in-the-middle risk; and contact Siemens customer support for patch availability and update guidance.

Quick answers

What is CVE-2026-33391?: Until a vendor patch is available, organizations should: restrict access to RUGGEDCOM APE1808 management interfaces to trusted networks; enforce strong authentication and least-privilege user accounts; monitor for suspicious dashboard import activity; implement network segmentation to limit man-in-the-middle risk; and contact Siemens customer support for patch availability and update guidance.
How severe is CVE-2026-33391?: high, CVSS 7.5
Is CVE-2026-33391 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-33391 be mitigated?: Until a vendor patch is available, organizations should: restrict access to RUGGEDCOM APE1808 management interfaces to trusted networks; enforce strong authentication and least-privilege user accounts; monitor for suspicious dashboard import activity; implement network segmentation to limit man-in-the-middle risk; and contact Siemens customer support for patch availability and update guidance.

CVSS

7.5

Vendor

Siemens

Published

Oct 24, 2026 · 05:33

Patch

Unknown / not confirmed

Affected products

RUGGEDCOM APE1808

Mitigation

Siemens RUGGEDCOM APE1808 Firmware Vulnerabilities Disclosed Across Five CVEs

A CISA-released industrial control systems advisory (ICSA-26-295-18) discloses five vulnerabilities in Siemens RUGGEDCOM APE1808 devices integrated with Nozomi Guardian/CMC. The flaws span template injection, incorrect authorization, lack of administrator control over security, and improper certificate validation, with CVSS scores ranging from 3.1 (medium) to 7.5 (high). Siemens has not released public patches and directs affected users to contact customer support for remediation. The vulnerabilities impact critical infrastructure sectors worldwide, including energy, transportation, manufacturing, healthcare, financial services, and government facilities.

12m

CVE-2026-33391

Quick answers

Related News

Siemens RUGGEDCOM APE1808 Firmware Vulnerabilities Disclosed Across Five CVEs