Vulnerability record

CVE-2026-44415

Severity: HighExploitation: No known exploitation

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations, limit exposure of affected systems, and watch this record for a patch.

Description

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdate

    CVE-2026-44415 scored CVSS 8.9

    Basis: NIST National Vulnerability Database

  2. Disclosed

    Siemens Industrial Edge Device Kit

    Basis: CISA Cybersecurity Advisories (government advisory)

Coverage

References