Is CVE-2026-85115 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-85115

Update the .NET Client Library for SIMATIC S7 Webserver API to version V3.3.61 or later (CVE-2026-85114) and V3.3.62 or later (CVE-2026-85115). Siemens recommends protecting network access to control system devices, locating industrial networks behind firewalls, and using VPNs for remote access. CISA advises minimizing internet exposure and isolating control system networks from business networks.

Quick answers

What is CVE-2026-85115?: Update the .NET Client Library for SIMATIC S7 Webserver API to version V3.3.61 or later (CVE-2026-85114) and V3.3.62 or later (CVE-2026-85115). Siemens recommends protecting network access to control system devices, locating industrial networks behind firewalls, and using VPNs for remote access. CISA advises minimizing internet exposure and isolating control system networks from business networks.
How severe is CVE-2026-85115?: high, CVSS 7.5
Is CVE-2026-85115 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-85115 be mitigated?: Update the .NET Client Library for SIMATIC S7 Webserver API to version V3.3.61 or later (CVE-2026-85114) and V3.3.62 or later (CVE-2026-85115). Siemens recommends protecting network access to control system devices, locating industrial networks behind firewalls, and using VPNs for remote access. CISA advises minimizing internet exposure and isolating control system networks from business networks.

CVSS

7.5

Vendor

Siemens

Published

Oct 24, 2026 · 05:30

Patch

Unknown / not confirmed

Affected products

.NET Client Library for SIMATIC S7 Webserver API

Mitigation

Siemens Releases Patches for Two Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API

Siemens ProductCERT, in coordination with CISA, has disclosed two vulnerabilities in the .NET Client Library for SIMATIC S7 Webserver API. CVE-2026-85114 is a path traversal flaw that could allow an attacker to write arbitrary files outside the intended download directory. CVE-2026-85115 fails to redact PLC restore passwords from HTTP error messages, potentially exposing credentials. Siemens has released updated library versions (v3.3.61 and v3.3.62) addressing the respective issues. No confirmed active exploitation has been reported as of the advisory publication date.

12m

CVE-2026-85115

Quick answers

Related News

Siemens Releases Patches for Two Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API