ZeusQA
Start free

Known exploited vulnerabilities

Siemens vulnerabilities attackers have used

Every Siemens vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Siemens vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2026-110936, added Oct 20, 2026. SIMATIC CP has the most entries (1).

In KEV, all time
2
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
2

By product

SIMATIC CP (1), Software Center (1).

New Critical and High Siemens CVEs this week

  • CVE-2026-59082highA vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device.
  • CVE-2026-109097highA vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program.

Every Siemens entry in CISA KEV

  1. CVE-2026-110936

    Added · due

    Siemens Software Center Uncontrolled Search Path Element Vulnerability

    Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code…

  2. CVE-2016-8562

    Added · due

    Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

    An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works