Path traversal in Siemens Industrial Edge devices
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Siemens Industrial Edge Cloud Device (IECD) from 0 before V1.28.1, Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, and other products are affected. The affected systems do not properly restrict access to internal APIs and paths (CWE-35). An authenticated remote attacker can access sensitive internal information, which in the worst case could lead to unauthorized access to the system.
Written with Claude Haiku 5.5 from the sources below · 2026-10-27
Description from the CNA
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Industrial Edge Device Kit - arm64 V1.14, Industrial Edge Device Kit - arm64 V1.15, Industrial Edge Device Kit - arm64 V1.16, Industrial Edge Device Kit - arm64 V1.17, Industrial Edge Device Kit - arm64 V1.18, Industrial Edge Device Kit - arm64 V1.19, Industrial Edge Device Kit - arm64 V1.20, Industrial Edge Device Kit - arm64 V1.21, Industrial Edge Device Kit - arm64 V1.22, Industrial Edge Device Kit - arm64 V1.23, Industrial Edge Device Kit - arm64 V1.24, Industrial Edge Device Kit - arm64 V1.25, Industrial Edge Device Kit - arm64 V1.26, Industrial Edge Device Kit - arm64 V1.27, Industrial Edge Device Kit - arm64 V1.28, Industrial Edge Device Kit - arm64 V1.5, Industrial Edge Device Kit - arm64 V1.6, Industrial Edge Device Kit - arm64 V1.7, Industrial Edge Device Kit - arm64 V1.8, Industrial Edge Device Kit - arm64 V1.9, Industrial Edge Device Kit - x86-64 V1.10, Industrial Edge Device Kit - x86-64 V1.11, Industrial Edge Device Kit - x86-64 V1.12, Industrial Edge Device Kit - x86-64 V1.13, Industrial Edge Device Kit - x86-64 V1.14, Industrial Edge Device Kit - x86-64 V1.15, Industrial Edge Device Kit - x86-64 V1.16, Industrial Edge Device Kit - x86-64 V1.17, Industrial Edge Device Kit - x86-64 V1.18, Industrial Edge Device Kit - x86-64 V1.19, Industrial Edge Device Kit - x86-64 V1.20, Industrial Edge Device Kit - x86-64 V1.21, Industrial Edge Device Kit - x86-64 V1.22, Industrial Edge Device Kit - x86-64 V1.23, Industrial Edge Device Kit - x86-64 V1.24, Industrial Edge Device Kit - x86-64 V1.25, Industrial Edge Device Kit - x86-64 V1.26, Industrial Edge Device Kit - x86-64 V1.27, Industrial Edge Device Kit - x86-64 V1.28, Industrial Edge Device Kit - x86-64 V1.5, Industrial Edge Device Kit - x86-64 V1.6, Industrial Edge Device Kit - x86-64 V1.7, Industrial Edge Device Kit - x86-64 V1.8, Industrial Edge Device Kit - x86-64 V1.9, Industrial Edge Own Device (IEOD), Industrial Edge Virtual Device (IEVD), SCALANCE LPE9413 (6GK5998-3GS01-2AC2), SCALANCE LPE9433 (6GK5998-3GS11-2AC2), SIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2), SIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2), SIMATIC IPC BX-21A Industrial Edge Device, SIMATIC IPC BX-39A Industrial Edge Device, SIMATIC IPC BX-59A Industrial Edge Device, SIMATIC IPC127E Industrial Edge Device, SIMATIC IPC227E Industrial Edge Device, SIMATIC IPC227G Industrial Edge Device, SIMATIC IPC427E Industrial Edge Device, SIMATIC IPC847E Industrial Edge Device. Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | Industrial Edge Cloud Device (IECD) | before V1.28.1 | V1.28.1 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.10 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.11 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.12 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.13 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.14 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.15 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.16 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.17 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.18 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.19 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.20 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.21 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.22 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.23 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.24 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.25 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.26 | before V1.26.2-1 | V1.26.2-1 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.27 | before V1.27.1-1 | V1.27.1-1 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.28 | before V1.28.0-6 | V1.28.0-6 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.5 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.6 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.7 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.8 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.9 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.10 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.11 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.12 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.13 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.14 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.15 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.16 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.17 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.18 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.19 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.20 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.21 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.22 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.23 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.24 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.25 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.26 | before V1.26.2-1 | V1.26.2-1 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.27 | before V1.27.1-1 | V1.27.1-1 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.28 | before V1.28.0-6 | V1.28.0-6 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.5 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.6 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.7 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.8 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.9 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Own Device (IEOD) | before V1.28.1 | V1.28.1 | Patch available | CNA |
| Siemens | Industrial Edge Virtual Device (IEVD) | before V1.28.1 | V1.28.1 | Patch available | CNA |
| Siemens | SCALANCE LPE9413 | all versions | — | No fix listed | CNA |
| Siemens | SCALANCE LPE9433 | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC IoT2050 Advanced IED | before V1.28.1-2 | V1.28.1-2 | Patch available | CNA |
| Siemens | SIMATIC IoT2050 SM IED | before V1.28.1-2 | V1.28.1-2 | Patch available | CNA |
| Siemens | SIMATIC IPC BX-21A Industrial Edge Device | before V1.28.1-2 | V1.28.1-2 | Patch available | CNA |
| Siemens | SIMATIC IPC BX-39A Industrial Edge Device | before V3.2.0-17 | V3.2.0-17 | Patch available | CNA |
| Siemens | SIMATIC IPC BX-59A Industrial Edge Device | before V3.2.0-17 | V3.2.0-17 | Patch available | CNA |
| Siemens | SIMATIC IPC127E Industrial Edge Device | before V3.2.0-17 | V3.2.0-17 | Patch available | CNA |
| Siemens | SIMATIC IPC227E Industrial Edge Device | before V3.2.0-17 | V3.2.0-17 | Patch available | CNA |
| Siemens | SIMATIC IPC227G Industrial Edge Device | before V3.2.0-17 | V3.2.0-17 | Patch available | CNA |
| Siemens | SIMATIC IPC427E Industrial Edge Device | before V3.2.0-17 | V3.2.0-17 | Patch available | CNA |
| Siemens | SIMATIC IPC847E Industrial Edge Device | before V3.2.0-17 | V3.2.0-17 | Patch available | CNA |
- Industrial Edge Cloud Device (IECD) VendorSiemens Affected before V1.28.1 Fixed in V1.28.1 Patch available CNA
- Industrial Edge Device Kit - arm64 V1.10 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.11 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.13 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.14 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.15 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.16 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.21 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.22 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.23 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.24 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.25 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.26 VendorSiemens Affected before V1.26.2-1 Fixed in V1.26.2-1 Patch available CNA
- Industrial Edge Device Kit - arm64 V1.27 VendorSiemens Affected before V1.27.1-1 Fixed in V1.27.1-1 Patch available CNA
- Industrial Edge Device Kit - arm64 V1.28 VendorSiemens Affected before V1.28.0-6 Fixed in V1.28.0-6 Patch available CNA
- Industrial Edge Device Kit - arm64 V1.5 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.6 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.8 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.9 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.10 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.11 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.13 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.14 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.15 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.16 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.21 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.22 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.23 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.24 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.25 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.26 VendorSiemens Affected before V1.26.2-1 Fixed in V1.26.2-1 Patch available CNA
- Industrial Edge Device Kit - x86-64 V1.27 VendorSiemens Affected before V1.27.1-1 Fixed in V1.27.1-1 Patch available CNA
- Industrial Edge Device Kit - x86-64 V1.28 VendorSiemens Affected before V1.28.0-6 Fixed in V1.28.0-6 Patch available CNA
- Industrial Edge Device Kit - x86-64 V1.5 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.6 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.8 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.9 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Own Device (IEOD) VendorSiemens Affected before V1.28.1 Fixed in V1.28.1 Patch available CNA
- Industrial Edge Virtual Device (IEVD) VendorSiemens Affected before V1.28.1 Fixed in V1.28.1 Patch available CNA
- SCALANCE LPE9413 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SCALANCE LPE9433 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC IoT2050 Advanced IED VendorSiemens Affected before V1.28.1-2 Fixed in V1.28.1-2 Patch available CNA
- SIMATIC IoT2050 SM IED VendorSiemens Affected before V1.28.1-2 Fixed in V1.28.1-2 Patch available CNA
- SIMATIC IPC BX-21A Industrial Edge Device VendorSiemens Affected before V1.28.1-2 Fixed in V1.28.1-2 Patch available CNA
- SIMATIC IPC BX-39A Industrial Edge Device VendorSiemens Affected before V3.2.0-17 Fixed in V3.2.0-17 Patch available CNA
- SIMATIC IPC BX-59A Industrial Edge Device VendorSiemens Affected before V3.2.0-17 Fixed in V3.2.0-17 Patch available CNA
- SIMATIC IPC127E Industrial Edge Device VendorSiemens Affected before V3.2.0-17 Fixed in V3.2.0-17 Patch available CNA
- SIMATIC IPC227E Industrial Edge Device VendorSiemens Affected before V3.2.0-17 Fixed in V3.2.0-17 Patch available CNA
- SIMATIC IPC227G Industrial Edge Device VendorSiemens Affected before V3.2.0-17 Fixed in V3.2.0-17 Patch available CNA
- SIMATIC IPC427E Industrial Edge Device VendorSiemens Affected before V3.2.0-17 Fixed in V3.2.0-17 Patch available CNA
- SIMATIC IPC847E Industrial Edge Device VendorSiemens Affected before V3.2.0-17 Fixed in V3.2.0-17 Patch available CNA
Remediation
Upgrade Industrial Edge Cloud Device (IECD) to V1.28.1, which is the fixed version. The sources list no fixed version for Industrial Edge Device Kit - arm64 V1.10 or for the other affected products.
Written with Claude Haiku 5.5 from the sources below · 2026-10-27
- Fix · CNA Industrial Edge Cloud Device (IECD) (Siemens) Fixed in V1.28.1
- Fix · CNA Industrial Edge Device Kit - arm64 V1.26 (Siemens) Fixed in V1.26.2-1
- Fix · CNA Industrial Edge Device Kit - arm64 V1.27 (Siemens) Fixed in V1.27.1-1
- Fix · CNA Industrial Edge Device Kit - arm64 V1.28 (Siemens) Fixed in V1.28.0-6
- Fix · CNA Industrial Edge Device Kit - x86-64 V1.26 (Siemens) Fixed in V1.26.2-1
- Fix · CNA Industrial Edge Device Kit - x86-64 V1.27 (Siemens) Fixed in V1.27.1-1
- Fix · CNA Industrial Edge Device Kit - x86-64 V1.28 (Siemens) Fixed in V1.28.0-6
- Fix · CNA Industrial Edge Own Device (IEOD) (Siemens) Fixed in V1.28.1
- Fix · CNA Industrial Edge Virtual Device (IEVD) (Siemens) Fixed in V1.28.1
- Fix · CNA SIMATIC IoT2050 Advanced IED (Siemens) Fixed in V1.28.1-2
- Fix · CNA SIMATIC IoT2050 SM IED (Siemens) Fixed in V1.28.1-2
- Fix · CNA SIMATIC IPC BX-21A Industrial Edge Device (Siemens) Fixed in V1.28.1-2
- Fix · CNA SIMATIC IPC BX-39A Industrial Edge Device (Siemens) Fixed in V3.2.0-17
- Fix · CNA SIMATIC IPC BX-59A Industrial Edge Device (Siemens) Fixed in V3.2.0-17
- Fix · CNA SIMATIC IPC127E Industrial Edge Device (Siemens) Fixed in V3.2.0-17
- Fix · CNA SIMATIC IPC227E Industrial Edge Device (Siemens) Fixed in V3.2.0-17
- Fix · CNA SIMATIC IPC227G Industrial Edge Device (Siemens) Fixed in V3.2.0-17
- Fix · CNA SIMATIC IPC427E Industrial Edge Device (Siemens) Fixed in V3.2.0-17
- Fix · CNA SIMATIC IPC847E Industrial Edge Device (Siemens) Fixed in V3.2.0-17
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Siemens Industrial Edge Device Kit - arm64 V1.26, Industrial Edge Device Kit - arm64 V1.27 and 4 more products V1.26.2-1, V1.27.1-1, V1.28.0-6
2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2026-71569 Missing access checks in Siemens Industrial Edge Device Kit arm64Priority MEDIUM 41
Timeline
- 2026-10-13 Threatist record created from CVE-2026-44414
- 2026-10-13 Alias added: GHSA-9xh9-64gc-w6jh
- 2026-10-14 CISA SSVC decision points changed
- 2026-10-14 Priority changed: MEDIUM → LOW
References
More Siemens vulnerabilities
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
Sources
- CVE-2026-44414 · CVE Program
- CVE-2026-44414 · NVD
- FIRST EPSS
- GHSA-9xh9-64gc-w6jh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences