CVE-2026-44415: Siemens Industrial Edge Device Kit - ARM64 v1.10

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.

Affected products

Published 2026-10-13. Last modified 2026-10-15.