CVE-2026-57262: Siemens Logo! Soft Comfort

Medium severity, CVSS 6.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.

Affected products

• Siemens Logo! Soft Comfort: before V9 (fixed in V9)

Published 2026-08-11. Last modified 2026-08-28.