Siemens vulnerabilities

CVEs per yearBy the year they were published

1. 20176
2. 201810
3. 201984
4. 202061
5. 2021294
6. 2022297
7. 2023254
8. 2024297
9. 2025275
10. 2026135

Known exploitedNewest addition to KEV first

• CVE-2026-110936

  A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an…

  Siemens · Siemens Software Center

  ExploitedHigh8.4

Newest CVEs

• CVE-2026-89209

  A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4),…

  Siemens · Mendix SAML (Mendix 10 compatible)

  High7.6
• CVE-2026-110936

  A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an…

  Siemens · Siemens Software Center

  ExploitedHigh8.4
• CVE-2026-102076

  A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…

  Siemens · APOGEE MBC (PPC) (BACnet)

  High8.7
• CVE-2026-102075

  A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…

  Siemens · APOGEE MBC (PPC) (BACnet)

  High8.7
• CVE-2026-102074

  A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…

  Siemens · APOGEE MBC (PPC) (BACnet)

  High8.7
• CVE-2026-102073

  A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…

  Siemens · APOGEE MBC (PPC) (BACnet)

  High8.8
• CVE-2026-89208

  A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo…

  Siemens · Capital Embedded AR Classic 431-422

  Medium6.9
• CVE-2026-89206

  A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for…

  Siemens · RUGGEDCOM CROSSBOW

  Medium5.3
• CVE-2026-89205

  A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for…

  Siemens · RUGGEDCOM CROSSBOW

  Medium5.3
• CVE-2026-89204

  A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for…

  Siemens · RUGGEDCOM CROSSBOW

  Medium5.3