Siemens Kas vulnerabilities

3 CVEs affecting Siemens Kas, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-54548, published 2026-08-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-47192, published 2026-08-14. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating…
CVE-2026-47191, published 2026-08-14. Low severity, CVSS 2.1. EPSS: 0.2% chance of exploitation in the next 30 days. kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID (SHA-1 or SHA-256) to qualify if a checkout of a repository is equivalent to the state…
CVE-2026-54548, published 2026-08-26. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSH_PRIVATE_KEY or SSH_PRIVATE_KEY_FILE creates ~/.ssh/config when no user-specific SSH configuration…