Product by Siemens
Siemens Spectrum Power 7
9 known vulnerabilities in Siemens Spectrum Power 7 (Siemens), 4 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
4
Actively exploited (KEV)
2
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-109618 | RCE via OOM corruption In CISA KEValso in 15 other products | 9.8 | |
| Critical | CVE-2026-109619 | RCE via stale global state In CISA KEValso in 15 other products | 8.1 | |
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 75 other products | 10.0 | |
| Critical | CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability In CISA KEVRansomwarealso in 23 other products | 9.0 | |
| Medium | CVE-2019-10933 | Siemens Spectrum Power: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 6.1 | |
| High | CVE-2022-26476 | Siemens Spectrum Power 4: Use of Hard-coded Credentials | 8.8 | |
| High | CVE-2024-29119 | Siemens Spectrum Power 7: Incorrect Privilege Assignment | 7.8 | |
| High | CVE-2023-38557 | Siemens Spectrum Power 7: Incorrect Permission Assignment for Critical Resource | 8.2 | |
| High | CVE-2023-44120 | Siemens Spectrum Power 7: Incorrect Permission Assignment for Critical Resource | 7.8 |
News
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootcsoonline,
- Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)unit42,
- PHP2Shell will persist in enterprise environments for yearscsoonline,
- Vulnerabilities in PHP Affecting Cisco Products: October 2026cisco-psirt,
- Multiples vulnérabilités dans Palo Alto Networks PAN-OS (28 octobre 2026)cert-fr,
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Executionthehackernews,