9.3 CriticalCWE-23
CVE-2026-41551
Siemens ROS# vulnerability
SiemensROS#
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 42% of scored CVEs
SeverityCVSS
9.3Critical
Description NVD
A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a path traversal vulnerability because user input is not properly sanitized. This could allow a remote attacker to access arbitrary files on the device.
Coverage 1 article · 1 outlet
- Critical Path Traversal Flaw in Siemens ROS# File Server ExposedCISA · first in our coverage · official notice