Multiples vulnérabilités dans les produits Siemens (08 septembre 2026)

unknownknown exploitedpublic exploitCVE-2026-31431 CVE-2026-34223

Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.

De multiples vulnérabilités ont été découvertes dans les produits Siemens. Elles permettent à un attaquant de provoquer une exécution de code arbitraire et une élévation de privilèges.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-09-08
Exploitation: Observed in the wild (CISA KEV)

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1133/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Exploitation confirmedCVE-2026-31431Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 99.9% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-342230.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-31431	coverage & exploitation status	NVD · CVE.org
CVE-2026-34223	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownexploitedNCSC-2026-0346 [1.01] [M/H] Kwetsbaarheden verholpen in Siemens productenncsc-nl
highexploited[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellencert-bund
highCVE-2026-34223: A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC…nvd
unknownexploitedLSN-0121-1: Kernel Live Patch Security Noticeubuntu
unknownexploitedDirty Frag and other issues in Amazon Linux kernelsaws
unknownexploitedOngoing updates on Copy.fail and variantsaws
unknownexploitedCVE-2026-31431aws
unknownexploitedMultiple vulnerabilities in SUSE Linux kernel (August 14, 2026)cert-fr-avis
highexploited[UPDATE] [high] Linux Kernel (Dirty Frag): Multiple vulnerabilities allow gaining administrator rightscert-bund
highexploitedCVE-2026-31431: crypto: algif_aead - Revert to operating out-of-placemsrc
high[UPDATE] [high] IBM QRadar SIEM: Multiple vulnerabilitiescert-bund
unknownexploitedSiemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFPcisa

Multiples vulnérabilités dans les produits Siemens (08 septembre 2026)

Details

Exploitation outlook

Referenced CVEs

Same CVEs, other sources

More from CERT-FR Avis de sécurité