Critical severity · published May 12, 2026
CVE-2026-22924
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)
9.1
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion conditions.
This could allow an attacker to disrupt normal operations or perform unauthorized actions, potentially impacting system availability and integrity.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SIMATIC CN 4100 · Siemens
before V5.0 · source: vendor
SC
Simatic CN 4100 Firmware · Siemens
before 5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-22924
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-22924
Mitigation
https://cert-portal.siemens.com/productcert/html/ssa-032379.html
More from SIMATIC CN 4100
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
9.8
CVE-2026-31789
Heap Buffer Overflow in Hexadecimal Conversion
9.8
CVE-2025-40938
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
9.6
CVE-2025-55754
Apache Tomcat: console manipulation via escape sequences in log messages