Vendor
Siemens
2,868 known vulnerabilities in products by Siemens, 33 of them actively exploited (CISA KEV).
Key figures
2,868
Vulnerabilities
33
Actively exploited (KEV)
12
Used by ransomware
358
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-0257 | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities In CISA KEVRansomware | 9.1 | |
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2019-0708 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability In CISA KEVRansomware | 9.0 | |
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomware | 9.0 | |
| Critical | CVE-2017-0144 | Microsoft SMBv1 Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0146 | Microsoft Windows SMB Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2017-0145 | Microsoft SMBv1 Remote Code Execution Vulnerability In CISA KEVRansomware | 8.8 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2017-0148 | Microsoft SMBv1 Server Remote Code Execution Vulnerability In CISA KEVRansomware | 8.1 | |
| Critical | CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-24858 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability In CISA KEV | 9.4 | |
| Critical | CVE-2017-0147 | Microsoft Windows SMBv1 Information Disclosure Vulnerability In CISA KEVRansomware | 7.5 | |
| Critical | CVE-2025-59718 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability In CISA KEV | 9.1 | |
| Critical | CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2025-25249 | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability In CISA KEV | 7.4 | |
| Critical | CVE-2025-10585 | Google Chromium V8 Type Confusion Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability: Privilege Escalation In CISA KEV | 9.8 | |
| Critical | CVE-2025-13223 | Google Chromium V8 Type Confusion Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-4911 | Glibc: buffer overflow in ld.so leading to privilege escalation In CISA KEV | 7.8 | |
| Critical | CVE-2025-39682 | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability In CISA KEV | 7.8 |
News
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFAthehackernews,
- ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojanthehackernews,
- PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessionsthehackernews,
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wildthehackernews,
- Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attackssecurityweek,