Update affected products to the latest Siemens firmware or software versions. For Industrial Edge devices, update to version 1.28.1 or later. For SCALANCE LPE9413/LPE9433, apply the recommended firmware update. For SIMATIC HMI panels, consult specific product advisories from Siemens and apply model-specific updates. If immediate updating is not possible, review Siemens mitigation guidance for each product line.
Quick answers
What is CVE-2026-44415?
Update affected products to the latest Siemens firmware or software versions. For Industrial Edge devices, update to version 1.28.1 or later. For SCALANCE LPE9413/LPE9433, apply the recommended firmware update. For SIMATIC HMI panels, consult specific product advisories from Siemens and apply model-specific updates. If immediate updating is not possible, review Siemens mitigation guidance for each product line.
How severe is CVE-2026-44415?
high
Is CVE-2026-44415 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2026-44415 be mitigated?
Update affected products to the latest Siemens firmware or software versions. For Industrial Edge devices, update to version 1.28.1 or later. For SCALANCE LPE9413/LPE9433, apply the recommended firmware update. For SIMATIC HMI panels, consult specific product advisories from Siemens and apply model-specific updates. If immediate updating is not possible, review Siemens mitigation guidance for each product line.
Update affected products to the latest Siemens firmware or software versions. For Industrial Edge devices, update to version 1.28.1 or later. For SCALANCE LPE9413/LPE9433, apply the recommended firmware update. For SIMATIC HMI panels, consult specific product advisories from Siemens and apply model-specific updates. If immediate updating is not possible, review Siemens mitigation guidance for each product line.
CISA has issued an Industrial Control Systems advisory (ICSA-26-295-17) disclosing multiple path traversal vulnerabilities in Siemens Industrial Edge Devices and SIMATIC HMI panels. The flaws, tracked as CVE-2026-44414 and CVE-2026-44415, could allow authenticated remote attackers to access sensitive internal information. Siemens has released updated firmware and software versions, urging users to update immediately. No public exploitation has been confirmed at the time of reporting.