TI-2026-20853 CVE-2026-25789 · GHSA-r662-c7v7-m9h4
Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF
Priority LOW 33
Affected devices do not properly validate and sanitize filenames on the Firmware Update page.
Vulnerabilities
3 records
Release: Siemens SIMATIC Drive Controller CPU 1504D TF, SIMATIC Drive Controller CPU 1507D TF and 95 more products V2.9.9, V3.1.6, V4.1.6 Clear all filters
TI-2026-20852 CVE-2026-25787 · GHSA-6664-q64g-w92p
Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF
Priority MEDIUM 42
Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.
TI-2026-20851 CVE-2026-25786 · GHSA-mg8g-5fc8-4fqp
Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF
Priority MEDIUM 42
Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface.