Vulnerability intelligence

CVE-2026-27662

Siemens SIMATIC HMI MTP1000 Unified Comfort Panel CWE-1188

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.

CVSS Score

7.7

High

EPSS — Exploit Probability

0.1%

Riskier than 2% of all CVEs · checked 2026-09-09

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories