Siemens Authenticated Remote API Info Disclosure via Unrestricted Paths
CVE-2026-44415 Published on October 13, 2026

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.

NVD

Weakness Type

Path Traversal: '.../...//'

The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.

Affected Versions

Siemens Industrial Edge Device Kit - arm64 V1.10:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.11:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.12:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.13:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.14:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.15:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.16:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.17:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.18:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.19:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.20:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.21:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.22:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.23:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.24:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.25:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.26:

Before V1.26.2-1 is affected.

Siemens Industrial Edge Device Kit - arm64 V1.27:

Before V1.27.1-1 is affected.

Siemens Industrial Edge Device Kit - arm64 V1.28:

Before V1.28.0-6 is affected.

Siemens Industrial Edge Device Kit - arm64 V1.5:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.6:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.7:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.8:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.9:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.10:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.11:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.12:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.13:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.14:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.15:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.16:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.17:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.18:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.19:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.20:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.21:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.22:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.23:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.24:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.25:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.26:

Before V1.26.2-1 is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.27:

Before V1.27.1-1 is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.28:

Before V1.28.0-6 is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.5:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.6:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.7:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.8:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.9:

Before * is affected.

Siemens SIMATIC HMI MTP1000 Unified Comfort Panel:

Before * is affected.

Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic:

Before * is affected.

Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral:

Before * is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom):

Before * is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit:

Before * is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top):

Before * is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom):

Before * is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension:

Before * is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top):

Before * is affected.

Siemens SIMATIC HMI MTP1200 Unified Comfort Panel:

Before * is affected.

Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic:

Before * is affected.

Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP1200 Unified Comfort Panel neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom):

Before * is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit:

Before * is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top):

Before * is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom):

Before * is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension:

Before * is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top):

Before * is affected.

Siemens SIMATIC HMI MTP1500 Unified Comfort Panel:

Before * is affected.

Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic:

Before * is affected.

Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP1500 Unified Comfort Panel neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom):

Before * is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit:

Before * is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top):

Before * is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom):

Before * is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension:

Before * is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top):

Before * is affected.

Siemens SIMATIC HMI MTP1900 Unified Comfort Panel:

Before * is affected.

Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic:

Before * is affected.

Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP1900 Unified Comfort Panel neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom):

Before * is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit:

Before * is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top):

Before * is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom):

Before * is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension:

Before * is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top):

Before * is affected.

Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic:

Before * is affected.

Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP2200 Unified Comfort Panel:

Before * is affected.

Siemens SIMATIC HMI MTP2200 Unified Comfort Panel neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP700 Unified Comfort Panel:

Before * is affected.

Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design:

Before * is affected.

Siemens SIMATIC HMI MTP700, Unified Comfort Panel neutral design:

Before * is affected.

Siemens SIPLUS HMI MTP1000 Unified Comfort:

Before * is affected.

Siemens SIPLUS HMI MTP1200 Unified Comfort:

Before * is affected.

Siemens SIPLUS HMI MTP700 Unified Comfort:

Before * is affected.

Siemens Authenticated Remote API Info Disclosure via Unrestricted PathsCVE-2026-44415 Published on October 13, 2026

Weakness Type

Path Traversal: '.../...//'

Affected Versions

Siemens Authenticated Remote API Info Disclosure via Unrestricted Paths
CVE-2026-44415 Published on October 13, 2026