Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a benign user with appropriate rights accesses the "Motion Control Diagnostics" parameters page, the malicious code would be executed in the scope of their web session.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-13 | 1 | Patch1 |
| 2026-05-19 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos Siemens ❗ CVE-2026-25787 ❗ CVE-2026-25786 ❗ CVE-2025-40949 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-siemens-6/ https://t.co/UF347jb2IS
Post summary
The post announces several new vulnerabilities affecting Siemens products, listing CVE-2026-25787, CVE-2026-25786, and CVE-2025-40949, and directs readers to external links for additional information.
Siemens drops 18 security advisories for ICS Patch Tuesday, fixing critical flaws in SIMATIC S7 PLCs and RUGGEDCOM devices. Key bugs (CVE-2026-25786, CVE-2026-25787) could lead to device takeover. 🏭 #ICSsecurity #OTsecurity #Siemens #PLC https://t.co/mDaB4b5JOR
Post summary
Siemens released 18 advisories to fix critical vulnerabilities (CVE‑2026‑25786, CVE‑2026‑25787) that could enable device takeover on SIMATIC S7 PLCs and RUGGEDCOM devices.