Vulnerabilities

CVSS

9.1 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Risk score

72.8

Published

2026-05-12

Status

Published

A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a path traversal vulnerability because user input is not properly sanitized. This could allow a remote attacker to access arbitrary files on the device.

Weaknesses

CWE-23

Coverage 1

vulnerability

Siemens Siemens ROS#

This advisory details a critical vulnerability in Siemens ROS# (version 2.2.2 and earlier) due to a path traversal flaw. An attacker could potentially access and modify arbitrary files on a system hosting the ROS# file_s…

CISA Advisories · May 14, 2026 Critical

CVE-2026-41551DEpath traversalindustrial control systemscwe-23

All articles mentioning it

Advisories and references

• cert-portal.siemens.com/productcert/html/ssa-357982.html