Siemens SIMATIC
A vulnerability (CVE-2026-27662) has been identified in Siemens SIMATIC HMI Unified Comfort Panels. The flaw allows an unauthenticated attacker to gain access to the web browser through the help link, potentially enabling them to conduct reconnaissance and potentially cause misconfigurations. Siemens has released updated versions of the affected panels and strongly recommends immediate software updates to mitigate this risk.
Siemens SIMATIC HMI Unified Comfort Panels, used in industrial automation systems, are affected by a critical vulnerability. This vulnerability, tracked as CVE-2026-27662, allows an attacker without credentials to access the device's web browser via the help link. This access could be exploited to gain unauthorized control, potentially leading to the installation of backdoors or other malicious software. The vulnerability stems from a lack of proper input validation within the HMI's web browser component.