THE article discusses two critical vulnerabilities discovered in Siemens products, disclosed on September 8, 2026. These vulnerabilities, tracked as CVE-2026-18963 and CVE-2026-50093, could lead to serious security risks, including unauthorized account access and potential full system compromise. Both flaws have high CVSS scores (9.1 and 9.0) and affect key operational technology in sensitive sites.
The first issue involves an authentication bypass in Industrial Edge Management allowing account takeover, while the second pertains to arbitrary file upload in Siveillance Control which could give root access to attackers. Patching is strongly recommended, and updates are available for affected versions.