🔐 CVE Alert

CVE-2026-27663

MEDIUM 6.5
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
5th

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.10). The affected application contains denial-of-service (DoS) vulnerability. The remote operation mode is susceptible to a resource exhaustion condition when subjected to a high volume of requests. Sending multiple requests can exhaust resources, preventing parameterization and requiring a reset or reboot to restore functionality.

CWE CWE-770
Vendor siemens
Product cpci85 central processing/communication
Ecosystems
Industries
IndustrialManufacturing
Published Mar 26, 2026
Last Updated Apr 14, 2026
Stay Ahead of the Next One

Get instant alerts for siemens cpci85 central processing/communication

Be the first to know when new medium vulnerabilities affecting siemens cpci85 central processing/communication are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Siemens / CPCI85 Central Processing/Communication
0 < V26.10
Siemens / RTUM85 RTU Base
0 < V26.10

References

NVD ↗ CVE.org ↗ EPSS Data ↗
cert-portal.siemens.com: https://cert-portal.siemens.com/productcert/html/ssa-246443.html seclists.org: http://seclists.org/fulldisclosure/2026/Apr/6