Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Industrial control advisorySeverity 9.1 critical

Siemens Siveillance Video

ICSA-26-225-09 · CISA · August 11, 2026

Summary

Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.

From CISA, quoted as published. Check the source before acting.

What to do

Update to V23.3 HotfixRev27 or later version Update to V24.1 HotfixRev16 or later version Update to V25.1 HotfixRev15 or later version

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVESeverityKnown exploitedExploit likelihoodWeakness
CVE-2026-30149.1 criticalNo0.8%Improper Neutralization of Special Elements used in an OS Command (CWE-78)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Affected products

VendorProductAffected versionsFixed
SiemensSiveillance Video V2023 R3vers:intdot/<23.3.27—
SiemensSiveillance Video V2024 R1vers:intdot/<24.1.16—
SiemensSiveillance Video V2025vers:intdot/<25.1.15—

Why it's on these mode pages

  • Maritime: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)

Change history

  1. August 11, 2026: Publication Date
  2. August 13, 2026: Initial CISA Republication of Siemens SSA-825228 advisory
  3. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com