Access Control Vulnerability in Siemens Industrial Edge Products
CVE-2026-44414

6.9MEDIUM

What is CVE-2026-44414?

A security flaw in the Siemens Industrial Edge products allows authenticated users to bypass access restrictions to internal APIs and paths. This vulnerability potentially exposes sensitive internal information, which could be exploited to gain unauthorized access to the system. Affected organizations are advised to assess their systems' configurations and apply necessary updates to mitigate the associated risks.

Affected Version(s)

Industrial Edge Cloud Device (IECD) 0

Industrial Edge Device Kit - arm64 V1.10 0

Industrial Edge Device Kit - arm64 V1.11 0

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.