Security vendor · OT and ICS security · in CISA KEV
Siemens in the CISA KEV catalog
CISA’s Known Exploited Vulnerabilities catalog lists 2 entries for Siemens as of catalog version 2026.11.06, released November 6, 2026. The newest was added October 20, 2026, and the latest federal due date is November 3, 2026.
Updated
- entries in the catalog
- 2
- newest addition
- October 20, 2026
- latest federal due date
- November 3, 2026
- marked known ransomware use
- 0
Directory record
- Website
- www.siemens.com/en-us
- Category
- OT and ICS security
- Headquarters
- HQ not established
- Founded
- 1847
- Ownership
- Ownership not established
- Company record
- Siemens on CISO Tribune
Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.
KEV entries, newest first
Filed by CISA under the name “Siemens”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.
Added October 20, 2026
CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability
Software Center · on must-patch
Due November 3, 2026
Added March 3, 2022
CVE-2016-8562 Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
SIMATIC CP
Due March 24, 2022
Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.
On Daily CISO, newest first
Daily briefing · November 4, 2026
Attackers Exploit Critical Node-RED Flaw to Backdoor Siemens ICS DevicesDaily briefing · October 23, 2026
CISA Adds Six Actively Exploited Flaws to KEV CatalogDaily briefing · October 22, 2026
CISA Adds Six Actively Exploited Vulnerabilities to KEV CatalogWeekly archive · Oct 19 – Oct 25, 2026
CISA Catalogs Six Actively Exploited Flaws Spanning Plex and SiemensWeekly archive · Aug 17 – Aug 23, 2026
NSA, CISA, FBI Warn of Active AI-Assisted Attacks on Siemens S7 PLCsWeekly archive · Jul 20 – Jul 26, 2026
Iran-Affiliated PLC Targeting Advisory Updated to Add Schneider, SiemensWeekly archive · Sep 15 – Sep 21, 2025
CISA Issues Eight ICS Advisories Covering Schneider, Siemens, HitachiWeekly archive · Aug 11 – Aug 17, 2025
CISA Releases 32 ICS Advisories Spanning Siemens and Rockwell LinesWeekly archive · Jul 7 – Jul 13, 2025
CISA Publishes Thirteen ICS Advisories Covering Siemens, Delta Electronics, and MoreWeekly archive · May 26 – Jun 1, 2025
CISA Issues Five ICS AdvisoriesWeekly archive · Mar 17 – Mar 23, 2025
Five More ICS Advisories Target Schneider, Siemens, SMA EquipmentWeekly archive · Mar 10 – Mar 16, 2025
CISA Issues Thirteen ICS Advisories Covering Siemens and Other ProductsWeekly archive · Feb 24 – Mar 2, 2025
Open Redirect Flaw Found in Siemens Teamcenter Single Sign-OnWeekly archive · Feb 17 – Feb 23, 2025
CISA Publishes Seven ICS Advisories Covering ABB, Siemens, Mitsubishi ElectricWeekly archive · Jan 20 – Jan 26, 2025
CISA Issues Three ICS Advisories for TCAS II, Siemens, ZFWeekly archive · Aug 7 – Aug 13, 2023
CISA Releases Twelve Siemens Industrial Control Systems AdvisoriesWeekly archive · Mar 20 – Mar 26, 2023
CISA Issues Seven ICS Advisories Covering Keysight, Siemens and Rockwell AutomationWeekly archive · Jan 9 – Jan 15, 2023
Researchers Disclose Unpatchable Root-of-Trust Flaw in Siemens S7-1500 PLCsWeekly archive · Nov 7 – Nov 13, 2022
CISA releases twenty ICS advisories covering Siemens, Omron, and others
Sources
- Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
- Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
- CISO Tribune, vendor directory record for Siemens, published November 8, 2026