Siemens October 2026 Advisories: Six Critical Fixes for PLCs, Edge Devices and CROSSBOW

Siemens' October 2026 security updates patch critical vulnerabilities in four product families: the SIMATIC S7-1500 MFP GNU/Linux subsystem (code execution, privilege escalation), the S7-1500 web server's Trace page (eight XSS flaws enabling unauthorized PLC operations), Industrial Edge devices (authenticated path traversal), and RUGGEDCOM CROSSBOW (SQLite-based code execution). Only Industrial Edge and CROSSBOW (V6.0) have fixes so far, so for the MFP and web server issues Siemens advises restricting access, disabling unneeded web servers, keeping industrial devices off the internet and office networks, and watching ProductCERT for upcoming patches.

**If you use Siemens industrial devices, make sure all of them (PLCs, HMIs, edge devices) are isolated from the internet and reachable only from trusted networks. Update RUGGEDCOM CROSSBOW to V6.0 and your Industrial Edge devices to the fixed versions ASAP. For SIMATIC S7-1500 controllers there are no fixes yet, so turn off the web server where you don't need it, never import trace files or run applications from untrusted sources. Apply Siemens' patches as soon as they're released.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/siemens-october-2026-advisories-six-critical-fixes-for-plcs-edge-devices-and-crossbow-8-r-a-3-i/gD2P6Ple2L