[Control systems] Siemens security advisory (AV26-448)

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>
        <div><p><strong>Serial number: </strong>AV26-448<br /><strong>Date: </strong>May 12, 2026</p>

On May 12, 2026, Siemens published a security advisory to address vulnerabilities in the following products. Included were updates for the following products:

  • RUGGEDCOM ROX II family – versions prior to V2.17.1
  • RUGGEDCOM APE1808 – contact customer support to receive patch and update information
  • RUGGEDCOM RM1224 LTE(4G) EU – versions prior to V8.3
  • SCALANCE – multiple versions and models
  • Solid Edge SE2026 – versions prior to V226.0 Update 5
  • gWAP – versions prior to V3.1.1
  • Simcenter Femap – versions prior to V2512.0003
  • Teamcenter – multiple versions and models
  • SIPROTEC 5 – multiple versions and models
  • SENTRON 7KT PAC1261 Data Manager – versions prior to V2.1.0
  • SIMATIC Drive Controller family – versions prior to V3.1.6
  • SIMATIC Drive Controller CPU 1504D TF – versions prior to V3.1.6
  • SIMATIC ET 200SP CPU – multiple versions and models
  • SIMATIC S7-1500 CPU – versions prior to V2.9.9
  • KACO blueplanet Inverters – versions prior to V6.1.4.9
  • Industrial Edge Devices – multiple versions and models
  • SIMATIC HMI Unified Comfort Panels Hygienic family – versions prior to V21
  • SIMATIC HMI Unified Comfort Panels Standard family – versions prior to V21
  • ROS# – versions prior to V2.2.2
  • Opcenter RDnL – versions prior to V2.52.0
  • SIMATIC CN 4100 – versions prior to V5.0

The Cyber Centre encourages users and administrators to review the web link provided, perform the suggested mitigations and apply the necessary updates.

</div>

Article Link: [Control systems] Siemens security advisory (AV26-448) - Canadian Centre for Cyber Security