HIGH 8.9 NVD
CVE-2026-44415
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
References
- https://cert-portal.siemens.com/productcert/html/ssa-377139.html
- https://cert-portal.siemens.com/productcert/html/ssa-832641.html
This high severity vulnerability with a CVSS score of 8.9 was published on 2026-10-13 via NVD.
vulnfeed aggregates 12961 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.