Siemens has disclosed multiple path traversal vulnerabilities in the Industrial Edge Device Kit that allow authenticated remote attackers to access sensitive internal information. The flaws, tracked as CVE-2026-44414 and CVE-2026-44415, affect numerous versions of the software for both arm64 and x86-64 architectures. Siemens has released updated versions for some products, recommending users upgrade to the latest releases where available. For versions without a planned fix, the company advises limiting network access to trusted parties only. The advisory notes that the vulnerabilities impact critical infrastructure sectors including energy, healthcare, and government services.
Read the full story at cisa.gov.
Photo: jarmoluk / Pixabay
