{"vulnerability": "CVE-2026-63350", "sightings": [{"uuid": "0417740f-7c4f-43bf-af06-64e0d59b3f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63350", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117432937199045653", "content": "CVE-2026-63350  Affected devices do not properly restrict executable content contained in imported trace files.\nThis could allow an attacker to social engineer an authorized user who holds the function right \u201cRead diagnostics\u201d into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user\u2019s browser session and perform PLC operations through the web server within the scope of the user\u2019s authorization.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63350https://cert-portal.siemens.com/productcert/html/ssa-591731.html#Siemens #SIMATICDriveControllerCPU1504DTF #SIMATICDriveControllerCPU1507DTF #SIMATICET200SPCPU1510SPF-1PN #SIMATICET200SPCPU1510SP-1PN #SIMATICET200SPCPU1512SPF-1PN #SIMATICET200SPCPU1512SP-1PN #SIMATICET200SPCPU1514SPF-2PN #SIMATICET200SPCPU1514SP-2PN #SIMATICET200SPCPU1514SPTF-2PN #SIMATICET200SPCPU1514SPT-2PN #SIMATICET200SPOpenControllerCPU1515SPPC(incl.SIPLUSvariants) #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V2CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-IndustrialOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC3V4CPUs #SIMATICS7-1500CPU1511-1PN #SIMATICS7-1500CPU1511C-1PN #SIMATICS7-1500CPU1511F-1PN #SIMATICS7-1500CPU1511T-1PN #SIMATICS7-1500CPU1511TF-1PN #SIMATICS7-1500CPU1512C-1PN #SIMATICS7-1500CPU1513-1PN #SIMATICS7-1500CPU1513F-1PN #SIMATICS7-1500CPU1513proF-2PN #SIMATICS7-1500CPU1513pro-2PN #SIMATICS7-1500CPU1515-2PN #SIMATICS7-1500CPU1515F-2PN #SIMATICS7-1500CPU1515T-2PN #SIMATICS7-1500CPU1515TF-2PN #SIMATICS7-1500CPU1516-3PN/DP #SIMATICS7-1500CPU1516F-3PN/DP #SIMATICS7-1500CPU1516proF-2PN #SIMATICS7-1500CPU1516pro-2PN #SIMATICS7-1500CPU1516T-3PN #SIMATICS7-1500CPU1516T-3PN/DP #SIMATICS7-1500CPU1516TF-3PN #SIMATICS7-1500CPU1516TF-3PN/DP #SIMATICS7-1500CPU1517-3PN #SIMATICS7-1500CPU1517-3PN/DP #SIMATICS7-1500CPU1517F-3PN #SIMATICS7-1500CPU1517F-3PN/DP #SIMATICS7-1500CPU1517T-3PN #SIMATICS7-1500CPU1517T-3PN/DP #SIMATICS7-1500CPU1517TF-3PN #SIMATICS7-1500CPU1517TF-3PN/DP #SIMATICS7-1500CPU1518-3PN #SIMATICS7-1500CPU1518-4PN/DP #SIMATICS7-1500CPU1518-4PN/DPMFP #SIMATICS7-1500CPU1518F-3PN #SIMATICS7-1500CPU1518F-4PN/DP #SIMATICS7-1500CPU1518F-4PN/DPMFP #SIMATICS7-1500CPU1518T-3PN #SIMATICS7-1500CPU1518T-4PN/DP #SIMATICS7-1500CPU1518TF-3PN #SIMATICS7-1500CPU1518TF-4PN/DP #SIMATICS7-1500CPUS7-1518-4PN/DPODK #SIMATICS7-1500CPUS7-1518F-4PN/DPODK #SIMATICS7-1500ET200pro:CPU1513PROF-2PN #SIMATICS7-1500ET200pro:CPU1513PRO-2PN #SIMATICS7-1500ET200pro:CPU1516PROF-2PN #SIMATICS7-1500ET200pro:CPU1516PRO-2PN #SIMATICS7-1500SoftwareControllerCPU1507SFV2 #SIMATICS7-1500SoftwareControllerCPU1507SFV3 #SIMATICS7-1500SoftwareControllerCPU1507SFV4 #SIMATICS7-1500SoftwareControllerCPU1507SV2 #SIMATICS7-1500SoftwareControllerCPU1507SV3 #SIMATICS7-1500SoftwareControllerCPU1507SV4 #SIMATICS7-1500SoftwareControllerCPU1508SFV2 #SIMATICS7-1500SoftwareControllerCPU1508SFV3 #SIMATICS7-1500SoftwareControllerCPU1508SFV4 #SIMATICS7-1500SoftwareControllerCPU1508STV3 #SIMATICS7-1500SoftwareControllerCPU1508STFV3 #SIMATICS7-1500SoftwareControllerCPU1508SV2 #SIMATICS7-1500SoftwareControllerCPU1508SV3 #SIMATICS7-1500SoftwareControllerCPU1508SV4 #SIMATICS7-1500SoftwareControllerLinuxV2 #SIMATICS7-1500SoftwareControllerLinuxV3 #SIMATICS7-PLCSIMAdvanced #SIPLUSET200SPCPU1510SPF-1PN #SIPLUSET200SPCPU1510SPF-1PNRAIL #SIPLUSET200SPCPU1510SP-1PN #SIPLUSET200SPCPU1510SP-1PNRAIL #SIPLUSET200SPCPU1512SPF-1PN #SIPLUSET200SPCPU1512SPF-1PNRAIL #SIPLUSET200SPCPU1512SP-1PN #SIPLUSET200SPCPU1512SP-1PNRAIL #SIPLUSS7-1500CPU1511-1PN #SIPLUSS7-1500CPU1511-1PNT1RAIL #SIPLUSS7-1500CPU1511-1PNTXRAIL #SIPLUSS7-1500CPU1511F-1PN #SIPLUSS7-1500CPU1513-1PN #SIPLUSS7-1500CPU1513F-1PN #SIPLUSS7-1500CPU1515F-2PN #SIPLUSS7-1500CPU1515F-2PNRAIL #SIPLUSS7-1500CPU1515F-2PNT2RAIL #SIPLUSS7-1500CPU1516-3PN/DP #SIPLUSS7-1500CPU1516-3PN/DPRAIL #SIPLUSS7-1500CPU1516-3PN/DPTXRAIL #SIPLUSS7-1500CPU1516F-3PN/DP #SIPLUSS7-1500CPU1516F-3PN/DPRAIL #SIPLUSS7-1500CPU1518-4PN/DP #SIPLUSS7-1500CPU1518-4PN/DPMFP #SIPLUSS7-1500CPU1518F-4PN/DP#CVE_2026_63350#bot", "creation_timestamp": "2026-10-13T09:40:18.462147Z"}, {"uuid": "2be75c38-2431-4ec5-9408-cddae48b181c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63350", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117433005151703305", "content": "\u26a0\ufe0f The severity is increased for this new vulnerability affecting Siemens SIMATIC Drive Controller CPU 1504D TF and other products (CVE-2026-63350) https://vuldb.com/vuln/417509", "creation_timestamp": "2026-10-13T09:57:34.989154Z"}, {"uuid": "3c28c783-93cc-4a54-ba92-3c5119bc1996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63350", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqrkka2rd2x", "content": "CVE-2026-63350 - simatic s7-1500 cpu 1511-1 pn\nSiemens control units can accept trace files without checking for hidden scripts. If a user with read\u2011only diagnostic permission opens a specially crafted file,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siemens #CVE #infosec", "creation_timestamp": "2026-10-13T10:00:06.380979Z"}, {"uuid": "26c59afd-1736-4c1f-b7d8-6ccd6d72bea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63350", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqynx5o6w2n", "content": "\ud83d\udea8 CVE-2026-63350 \u2014 CVSS 9.4 CRITICAL\n\nAffected devices do not properly restrict executable content contained in imported trace files. This could ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63350\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-13T12:07:17.178710Z"}, {"uuid": "ab605922-51ec-4a7e-8fa7-bfe5fb184360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63350", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxr4od4alv2o", "content": "Correction: these three Siemens flaws (CVE-2026-63350, -63353, -63354) affect dozens of SIMATIC products, including the S7-1500 PLC family, not just the Drive Controller CPU 1504D TF.\n\nSiemens rates each 9.6 (CVSS 3.1). Story updated.", "creation_timestamp": "2026-10-13T13:19:05.215318Z"}]}