Vulnerabilities

CVSS

7.7 High

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Risk score

61.6

Published

2026-05-12

Status

Awaiting Analysis

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.

Weaknesses

CWE-1188

Coverage 1

vulnerability

Siemens SIMATIC

A vulnerability (CVE-2026-27662) has been identified in Siemens SIMATIC HMI Unified Comfort Panels. The flaw allows an unauthenticated attacker to gain access to the web browser through the help link, potentially enablin…

CISA Advisories · May 14, 2026 High

CVE-2026-27662hmiindustrial controlweb browser

All articles mentioning it

Advisories and references

• cert-portal.siemens.com/productcert/html/ssa-387223.html