# Siemens Industrial Edge Device Kit path traversal flaw

Published: 2026-10-22 · Severity: routine · Sectors: Manufacturing, Energy, Infrastructure
Canonical: https://vorant.io/reports/8a3f4b2a-c22c-5f28-bd7f-35f7837dc5dd/siemens-industrial-edge-device-kit-path-traversal-flaw
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> Siemens Industrial Edge Device Kit improperly restricts internal API/path access, letting authenticated attackers read sensitive data or delete files.

Source: cisa.gov — https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09

## What to check

- Applies to: The 2 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

CISA published an advisory for Siemens Industrial Edge Device Kit (arm64 and x86-64 builds) describing a path traversal weakness (CWE-35) in which affected systems fail to properly restrict access to internal APIs and paths for authenticated users. An authenticated remote attacker could exploit this to access sensitive internal information, which could in turn facilitate unauthorized access to the system or result in deletion of data.

The advisory covers a very broad range of versions across both architectures, from V1.5 through V1.28. Versions prior to V1.26.2-1, V1.27.1-1, and V1.28.0-6 have vendor fixes available and should be updated. For all other listed versions (V1.5 through V1.25 and the arm64/x86-64 variants), Siemens has stated no fix is currently planned, leaving network-access restriction as the only mitigation.

There is no indication in the advisory of active exploitation in the wild. Defenders operating Industrial Edge Device Kit should prioritize upgrading to the patched versions where available, and for unpatched versions, strictly limit network access to trusted parties only, following general industrial control system security best practices (network segmentation, firewalling management interfaces, and minimizing exposure of edge devices to untrusted networks).

## Mentioned in this report

- Vulnerabilities: CVE-2026-44414, CVE-2026-44415

Source reporting: https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/8a3f4b2a-c22c-5f28-bd7f-35f7837dc5dd/siemens-industrial-edge-device-kit-path-traversal-flaw.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup