Siemens released July 2026 security advisories for multiple industrial products, including several critical flaws that can let attackers bypass authentication, run code, crash systems, steal data, or gain elevated access. The most severe issue is a CVSS 10.0 token invalidation flaw in Opcenter X that can allow authentication bypass and full application access; Siemens also patched or mitigated critical issues in Mendix, Sidis Secured SmartPlug, Simatic S7-1500, Cadra, and Desigo CC, alongside high-severity flaws in Simatic S7-PLCSIM, Ruggedcom APE1808, Comos, Designcenter, Simcenter, Solid Edge, and Tecnomatrix.
Why it matters: These products are used in industrial and building-control environments, so affected organizations should review Siemens advisories and patch or apply mitigations quickly. The risks include unauthorized control, outages, and compromise of sensitive operational systems.
Eduard Kovacs
2026.07.15
100% relevant
The article establishes a distinct Siemens July 2026 ICS patch event with named affected products and a concrete critical authentication-bypass issue in Opcenter X.
← Back to all stories