Siemens Industrial Edge Device Kit
Apply the vendor's security update for the affected products.
No official fix confirmed yet
Until a fix ships, follow the vendor's mitigations, limit exposure of affected systems, and watch this record for a patch.
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.
Developments from the last 30 days, newest first.
CVE-2026-44415 scored CVSS 8.9
Basis: NIST National Vulnerability Database
Siemens Industrial Edge Device Kit
Basis: CISA Cybersecurity Advisories (government advisory)
Apply the vendor's security update for the affected products.