Advisories · Technology

Siemens COMOS V10.6.

Every CVE that names Siemens COMOS V10.6 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40945 CVE record

CVSS 8.5 High

Untrusted search path in Siemens COMOS V10.4.5 and others
- Siemens COMOS V10.4.5
- Siemens COMOS V10.6
- CWE-426
Not analysed yet 14 Jul 2026
CVE-2025-40801 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Improper certificate validation in Siemens COMOS V10.6 and others
- Siemens COMOS V10.6
- Siemens JT Bi-Directional Translator for STEP
- Weak cryptography or TLS
Not analysed yet 9 Dec 2025
CVE-2025-40800 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper certificate validation in Siemens COMOS V10.6 and others
- Siemens COMOS V10.6
- Siemens NX V2412
- Weak cryptography or TLS
Not analysed yet 9 Dec 2025