CISA republishes Siemens advisory on RUGGEDCOM APE1808 vulnerabilities

By Atlas Watchline Staff · Regulatory · August 13, 2026

CISA republished a Siemens ProductCERT advisory on Aug. 12 about two vulnerabilities tied to Fortinet software used in Siemens RUGGEDCOM APE1808 products.

CISA on Aug. 12 republished a Siemens ProductCERT advisory about two vulnerabilities affecting Siemens RUGGEDCOM APE1808 products that include Fortinet next-generation firewall software.

The advisory says the affected equipment is used in industrial settings worldwide, including critical manufacturing, energy and transportation systems. Siemens said the products are listed as known affected and directed users to contact customer support for detailed information.

What the advisory says

The CISA notice, ICSA-26-225-06, republishes Siemens ProductCERT advisory SSA-127084. It identifies CVE-2026-23573 as a cross-site scripting issue and CVE-2026-59839 as a path traversal issue.

For CVE-2026-23573, CISA listed a CVSS v3.1 base score of 6.1, which it classed as medium. The advisory says the flaw could allow an authenticated remote user to execute code or commands through crafted requests.

For CVE-2026-59839, CISA listed a CVSS v3.1 base score of 5.5, also medium. The advisory says a privileged authenticated attacker with physical access could delete the file system through crafted CLI commands.

CISA said both issues are marked known affected for RUGGEDCOM APE1808 and that the remediation is a vendor fix. Siemens told users to contact customer support for more information and to follow Fortinet’s advisory for workarounds and mitigation measures.

What comes next

The advisory points users to Fortinet’s mitigation guidance and to Siemens ProductCERT for follow-up questions. CISA’s notice does not give a patch schedule beyond the vendor-fix status listed for the affected product.

Sources

• CISA Cybersecurity Advisories: ICSA-26-225-06

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.