Patchfirst: Siemens vulnerabilitieshttps://patchfirst.co/vendor/siemens/New and newly exploited Siemens CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-110936/CVE-2026-110936#kevTue, 20 Oct 2026 00:00:00 GMTSiemens · Software Center. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 61.7% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1574.008 Path Interception by Search Order Hijacking. Priority 65.0 of 100.kevT1078T1059T1574.008CVE-2026-44415: Affected systems do not properly restrict access to internal APIs and paths for authenticated usershttps://patchfirst.co/cve/CVE-2026-44415/CVE-2026-44415Tue, 13 Oct 2026 00:00:00 GMTSiemens · Industrial Edge Device Kit - arm64 V1.10. Not in CISA KEV. EPSS 0.5% (higher than 41.2% of CVEs). CVSS 9.1 CRITICAL. Priority 16.9 of 100.CVE-2026-63350: Affected devices do not properly restrict executable content contained in imported trace fileshttps://patchfirst.co/cve/CVE-2026-63350/CVE-2026-63350Tue, 13 Oct 2026 00:00:00 GMTSiemens · SIMATIC Drive Controller CPU 1504D TF. Not in CISA KEV. EPSS 0.3% (higher than 26.8% of CVEs). CVSS 9.6 CRITICAL. Priority 14.4 of 100.CVE-2026-63354: Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…https://patchfirst.co/cve/CVE-2026-63354/CVE-2026-63354Tue, 13 Oct 2026 00:00:00 GMTSiemens · SIMATIC Drive Controller CPU 1504D TF. Not in CISA KEV. EPSS 0.3% (higher than 24.3% of CVEs). CVSS 9.6 CRITICAL. Priority 13.8 of 100.CVE-2026-63353: Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on…https://patchfirst.co/cve/CVE-2026-63353/CVE-2026-63353Tue, 13 Oct 2026 00:00:00 GMTSiemens · SIMATIC Drive Controller CPU 1504D TF. Not in CISA KEV. EPSS 0.3% (higher than 24.3% of CVEs). CVSS 9.6 CRITICAL. Priority 13.8 of 100.CVE-2026-58115: A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running…https://patchfirst.co/cve/CVE-2026-58115/CVE-2026-58115Tue, 11 Aug 2026 00:00:00 GMTSiemens · SIMATIC IoT2050 Advanced. Not in CISA KEV. EPSS 1.0% (higher than 61.3% of CVEs). CVSS 10.0 CRITICAL. Priority 64.3 of 100.[KEV] CVE-2016-8562: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerabilityhttps://patchfirst.co/cve/CVE-2016-8562/CVE-2016-8562#kevThu, 03 Mar 2022 00:00:00 GMTSiemens · SIMATIC CP. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 3.6% (higher than 89.5% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1210 Exploitation of Remote Services; T1499.004 Application or System Exploitation. Priority 61.1 of 100.kevT1210T1499.004CVE-2020-15782: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open…https://patchfirst.co/cve/CVE-2020-15782/CVE-2020-15782Fri, 28 May 2021 00:00:00 GMTSiemens · SIMATIC Drive Controller family. Not in CISA KEV. EPSS 5.2% (higher than 92.5% of CVEs). CVSS 9.8 CRITICAL. Named in 1 threat report. Priority 29.2 of 100.CVE-2019-13922: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1)https://patchfirst.co/cve/CVE-2019-13922/CVE-2019-13922Fri, 13 Sep 2019 00:00:00 GMTSiemens AG · SINEMA Remote Connect Server. Not in CISA KEV. EPSS 0.6% (higher than 46.1% of CVEs). Priority 9.2 of 100.