Siemens control products affected by vulnerabilities in AV26-1139
Original title: [Control systems] Siemens security advisory (AV26-1139)
The November 10 notice lists Mendix, SIMATIC, WinCC, ROS#, and other products, without CVE or exploitation details.
The Canadian Centre for Cyber Security published advisory AV26-1139 on November 10, 2026, saying Siemens is affected by vulnerabilities in multiple products. Named lines include Mendix Studio Pro, ROS#, SIMATIC BATCH, Information Server, PCS 7, Process Historian, WinCC, meta-iot2050, RUGGEDCOM APE1808, and Simcenter Femap. Some entries cite versions prior to a stated release; others are listed as all versions. Users are told to review the Siemens link and apply updates as they become available.
Unconfirmed: The notice does not name CVE identifiers, impact, or whether any flaw is exploited.
- Mendix Studio Pro 11 is affected prior to V11.16.0, and 11.12 prior to V11.12.7.
- ROS# is affected prior to V2.3.1, and Simcenter Femap prior to V2606.0002.
- SIMATIC BATCH V9.1, PCS 7 V9.1, and listed WinCC lines are all versions.
- meta-iot2050 V01.03.01 and RUGGEDCOM APE1808, all versions, are also listed.
| Product | Affected | Fixed in |
|---|---|---|
| Siemens Mendix Studio Pro 11 | Prior to V11.16.0 | V11.16.0 |
| Siemens Mendix Studio Pro 11.12 | Prior to V11.12.7 | V11.12.7 |
| Siemens ROS# | Prior to V2.3.1 | V2.3.1 |
| Siemens SIMATIC BATCH | V9.1, all versions | — |
| Siemens SIMATIC Information Server | 2020 / 2022, all versions | — |
| Siemens SIMATIC PCS 7 | V9.1, all versions | — |
| Siemens SIMATIC Process Historian | 2020 / 2022, all versions | — |
| Siemens SIMATIC WinCC Runtime Professional | V17 / V18 / V19 / V20 / V21, all versions | — |
| Siemens SIMATIC WinCC | V7.5 / V8.0 / V8.1, all versions | — |
| Siemens meta-iot2050 | V01.03.01 | — |
- 1.Review Siemens advisory AV26-1139 and apply updates as they become available.
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1139 Date: November 10, 2026 As of November 10, 2026, Siemens is affected by vulnerabilities in the following products: Mendix Studio Pro 11 Prior to V11. 16. 0 Mendix Studio Pro 11.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.