Siemens ProductCERT advisory SSA-142885 (published 8 September 2026) says Reyrolle 7SR5 before V2.70 is affected by multiple vulnerabilities, with a CVSS v3.1 base score of 9.8 (CVSS v4.0 9.3), and recommends updating to V2.70 or later. (source: Siemens ProductCERT SSA-142885)

Siemens advisory SSA-503852, also published 8 September 2026, says Industrial Edge Management contains an authentication bypass (CVE-2026-18963, CVSS v3.1 9.1) that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification.

Siemens says Industrial Edge Management Cloud was mitigated with firewall rules on 26 August 2026 and fixed with an update on 2 September 2026, with no user action necessary, and that Pro V1, Pro V2 and Virtual should be updated to V1.15.20, V2.2.2 and V2.9.1 or later. (source: Siemens ProductCERT SSA-503852)

AhnLab ASEC's summary of Siemens' September 2026 regular security update (8 Sep 2026) also lists an OIS Web Module file-upload flaw (CVE-2026-50093, CVSS 9.0), a relative path traversal in SIMOVE Fleetmanager and SIPLANT (CVE-2026-67367, CVSS 8.6) and a resource transfer flaw (CVE-2026-31431, CVSS 7.8) in multiple Siemens industrial products. (source: AhnLab ASEC)