Metrics
Affected Vendors & Products
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Wed, 14 Oct 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 13 Oct 2026 10:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Access to Internal APIs for Authenticated Users Leads to Unauthorized Data Exposure and Deletion |
Tue, 13 Oct 2026 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data. | |
| Weaknesses | CWE-35 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2026-10-14T19:33:28.849Z
Reserved: 2026-05-06T13:47:12.682Z
Link: CVE-2026-44415
Updated: 2026-10-14T19:33:25.082Z
Status : Awaiting Analysis
Published: 2026-10-13T10:17:16.293
Modified: 2026-10-15T20:38:04.303
Link: CVE-2026-44415
No data.
OpenCVE Enrichment
Updated: 2026-10-13T10:30:19Z