CVE-2026-57263: Siemens Logo! Soft Comfort

Medium severity, CVSS 6.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.

Affected products

• Siemens Logo! Soft Comfort: before V9 (fixed in V9)

Published 2026-08-11. Last modified 2026-08-28.