Siemens SIMATIC HMI Unified Comfort Panels Firmware vulnerabilities

2 CVEs affecting Siemens SIMATIC HMI Unified Comfort Panels Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-31431, published 2026-04-22.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability, published 2026-04-22. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-05-01. EPSS: 3.4% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the…
• CVE-2020-27827, published 2021-03-18. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of…