CVE-2026-44415

CRITICAL

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.

CVSS v3.1 Score

9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 10/13/2026Modified: 10/15/2026

Related Intelligence (3)

CRITICALVulnerability

Siemens Industrial Edge Device Kit

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-09.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal

CVE-2026-44414CVE-2026-44415
CISA Advisories
CRITICALVulnerability

Siemens Industrial Edge Devices

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-17.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected pr

CVE-2026-44414CVE-2026-44415
CISA Advisories
CRITICALVulnerability

NVD CRITICAL: CVE-2026-44415 — Affected systems do not properly restrict access to internal APIs and paths for ...

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.

CVE-2026-44415
NIST NVD

References (2)

https://cert-portal.siemens.com/productcert/html/ssa-377139.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-832641.html