Skip to content
ThreatCluster

Critical Vulnerabilities in Siemens SIMATIC S7 PLCs and Webserver API

First seen 23 Oct 2026, 03:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 23, 2026 at 04:11 UTC
  • •Multiple critical vulnerabilities identified in Siemens SIMATIC S7 PLCs and Webserver API.
  • •Attackers could execute malicious code or access sensitive information.
  • •Siemens recommends immediate updates and mitigations for affected systems.

Siemens has disclosed multiple vulnerabilities in its SIMATIC S7 PLCs web server and .NET Client Library for the Webserver API. The vulnerabilities could allow attackers to execute malicious code in authorized user sessions or obtain sensitive information. Affected systems include various models of the SIMATIC S7 PLCs and the .NET Client Library versions below 3.3.61. Siemens is preparing fixes and recommends specific mitigations for systems without available patches. The vulnerabilities are identified as CVE-2026-63350, CVE-2026-63351, CVE-2026-63352, CVE-2026-63353, CVE-2026-63354, CVE-2026-63355, CVE-2026-63356, CVE-2026-63357 for the PLCs, and CVE-2026-85114, CVE-2026-85115 for the Webserver API. The CVEs were published on October 13, 2026, with critical and high severity ratings. Users are urged to minimize network exposure and implement security measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-13
CVE vulnerabilities published
Multiple CVEs affecting Siemens SIMATIC S7 PLCs and Webserver API were published, including critical and high severity flaws.
Cisa
2026-10-13
CVE-2026-63351 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-63356 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-85115 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-63355 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-63354 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-85114 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-63357 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-63350 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-63352 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (2)

Following this threat?

Track Siemens and CVE-2026-63350 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (23)

1 / 3

Common questions

Which Siemens products are affected?
The vulnerabilities affect various models of SIMATIC S7 PLCs and the .NET Client Library for the Webserver API.
What actions should I take?
Update to the latest versions of the affected products as recommended by Siemens and implement network security measures.
Are these vulnerabilities being actively exploited?
No confirmed exploitation has been reported; however, users are advised to apply patches promptly.