Skip to content
Threat Feed
Subscribe
high threat

Siemens Security Updates - November 2026

Roundup of Siemens security advisories published in November 2026.

CVE search metadata

CVE search record: CVE-2026-109097. Severity: high. CVSS: 8.2. KEV: no. Product: ROS# (< V2.3.1). Brief: Siemens Security Updates - November 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-11-siemens-security-updates/

CVE search record: CVE-2026-109830. Severity: high. CVSS: 7.3. KEV: no. Product: meta-iot2050 (>= V01.03.01). Brief: Siemens Security Updates - November 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-11-siemens-security-updates/

CVE search record: CVE-2026-112136. Severity: high. CVSS: 8.8. KEV: no. Product: Mendix Studio Pro 11 (>= V11.15.0 < V11.16.0). Brief: Siemens Security Updates - November 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-11-siemens-security-updates/

CVE search record: CVE-2026-58114. Severity: high. CVSS: 7.5. KEV: no. Product: SIMATIC BATCH. Brief: Siemens Security Updates - November 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-11-siemens-security-updates/

CVE search record: CVE-2026-59082. Severity: high. CVSS: 7.8. KEV: no. Brief: Siemens Security Updates - November 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-11-siemens-security-updates/

Triage facts

Revision 1
Evidence
Unknown
Severity
High
Sources
1 public source
Freshness
Revision 1Nov 10, 14:33 UTC
Vulnerabilities
5 CVEs

What's new

This roundup covers 4 Siemens security vulnerabilities. CVSS base scores range from 7.3 to 8.8. None are reported as actively exploited at the time of release. The issues affect Mendix Studio Pro 11, ROS#, SIMATIC BATCH, meta-iot2050.

Summary

CVEProductSeverityCVSSEPSSKEVSource
CVE-2026-109097ROS# (< V2.3.1)High8.2noNVD (authoritative)
CVE-2026-109830meta-iot2050 (>= V01.03.01)High7.3noNVD (authoritative)
CVE-2026-112136Mendix Studio Pro 11 (>= V11.15.0 < V11.16.0)High8.8noNVD (authoritative)
CVE-2026-58114SIMATIC BATCHHigh7.5noNVD (authoritative)

CVE-2026-109097

ROS# versions prior to V2.3.1 are vulnerable to a code injection attack due to improper escaping of text within message definition files. An attacker capable of supplying a crafted message definition file to a user of the library can trigger the execution of arbitrary code within the context of the generated program.

Affected products:

  • ROS# (< V2.3.1)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-109097

CVE-2026-109830

A vulnerability in the meta-iot2050 configuration parsing logic allows for arbitrary code execution. The system fails to sanitize input from configuration files before processing, enabling an attacker with file-write access to inject and execute unauthorized commands.

Affected products:

  • meta-iot2050 (>= V01.03.01)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-109830

CVE-2026-112136

Mendix Studio Pro 11 versions 11.15.0 through 11.16.0 and 11.12.6 through 11.12.7 contain a vulnerability where the MCP Server's HTTP listener is not restricted to the loopback interface. This misconfiguration exposes the interface to unauthorized remote network access, potentially allowing an attacker to interact with the server remotely.

Affected products:

  • Mendix Studio Pro 11 (>= V11.15.0 < V11.16.0)
  • Mendix Studio Pro 11.12 (>= V11.12.6 < V11.12.7)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-112136

CVE-2026-58114

SIMATIC software products utilize the deprecated NTLM protocol for remote user authentication without adequate security controls. An unauthenticated remote attacker performing a machine-in-the-middle attack can relay NTLM authentication packets to impersonate legitimate users and potentially gain unauthorized access to underlying services such as SQL servers.

Affected products:

  • SIMATIC BATCH
  • SIMATIC Information Server
  • SIMATIC PCS 7
  • SIMATIC Process Historian
  • SIMATIC WinCC Runtime Professional
  • SIMATIC WinCC

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-58114