{"metadata": {"vulnerability": "CVE-2026-63350", "count": 27, "kinds": {"milestone": 7, "sighting": 5, "kev": 0, "other": 15}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-16T14:30:16.082Z", "date_only": false, "value": "2026-07-16T14:30:16.082Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63350", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "last_revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:18:31.089Z", "date_only": false, "value": "2026-10-13T09:18:31.089Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63350", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T09:18:31.089Z", "date_only": false, "value": "2026-10-13T09:18:31.089Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2026-63350", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:40:18.462Z", "date_only": false, "value": "2026-10-13T09:40:18.462147Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432937199045653", "record": "CVE-2026-63350", "field": "creation_timestamp", "uuid": "0417740f-7c4f-43bf-af06-64e0d59b3f9f", "content": "CVE-2026-63350  Affected devices do not properly restrict executable content contained in imported trace files.\nThis could allow an attacker to social engineer an authorized user who holds the function right \u201cRead diagnostics\u201d into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user\u2019s browser session and perform PLC operations through the web server within the scope of the user\u2019s authorization.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63350https://cert-portal.siemens.com/productcert/html/ssa-591731.html#Siemens #SIMATICDriveControllerCPU1504DTF #SIMATICDriveControllerCPU1507DTF #SIMATICET200SPCPU1510SPF-1PN #SIMATICET200SPCPU1510SP-1PN #SIMATICET200SPCPU1512SPF-1PN #SIMATICET200SPCPU1512SP-1PN #SIMATICET200SPCPU1514SPF-2PN #SIMATICET200SPCPU1514SP-2PN #SIMATICET200SPCPU1514SPTF-2PN #SIMATICET200SPCPU1514SPT-2PN #SIMATICET200SPOpenControllerCPU1515SPPC(incl.SIPLUSvariants) #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V2CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-IndustrialOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC3V4CPUs #SIMATICS7-1500CPU1511-1PN #SIMATICS7-1500CPU1511C-1PN #SIMATICS7-1500CPU1511F-1PN #SIMATICS7-1500CPU1511T-1PN #SIMATICS7-1500CPU1511TF-1PN #SIMATICS7-1500CPU1512C-1PN #SIMATICS7-1500CPU1513-1PN #SIMATICS7-1500CPU1513F-1PN #SIMATICS7-1500CPU1513proF-2PN #SIMATICS7-1500CPU1513pro-2PN #SIMATICS7-1500CPU1515-2PN #SIMATICS7-1500CPU1515F-2PN #SIMATICS7-1500CPU1515T-2PN #SIMATICS7-1500CPU1515TF-2PN #SIMATICS7-1500CPU1516-3PN/DP #SIMATICS7-1500CPU1516F-3PN/DP #SIMATICS7-1500CPU1516proF-2PN #SIMATICS7-1500CPU1516pro-2PN #SIMATICS7-1500CPU1516T-3PN #SIMATICS7-1500CPU1516T-3PN/DP #SIMATICS7-1500CPU1516TF-3PN #SIMATICS7-1500CPU1516TF-3PN/DP #SIMATICS7-1500CPU1517-3PN #SIMATICS7-1500CPU1517-3PN/DP #SIMATICS7-1500CPU1517F-3PN #SIMATICS7-1500CPU1517F-3PN/DP #SIMATICS7-1500CPU1517T-3PN #SIMATICS7-1500CPU1517T-3PN/DP #SIMATICS7-1500CPU1517TF-3PN #SIMATICS7-1500CPU1517TF-3PN/DP #SIMATICS7-1500CPU1518-3PN #SIMATICS7-1500CPU1518-4PN/DP #SIMATICS7-1500CPU1518-4PN/DPMFP #SIMATICS7-1500CPU1518F-3PN #SIMATICS7-1500CPU1518F-4PN/DP #SIMATICS7-1500CPU1518F-4PN/DPMFP #SIMATICS7-1500CPU1518T-3PN #SIMATICS7-1500CPU1518T-4PN/DP #SIMATICS7-1500CPU1518TF-3PN #SIMATICS7-1500CPU1518TF-4PN/DP #SIMATICS7-1500CPUS7-1518-4PN/DPODK #SIMATICS7-1500CPUS7-1518F-4PN/DPODK #SIMATICS7-1500ET200pro:CPU1513PROF-2PN #SIMATICS7-1500ET200pro:CPU1513PRO-2PN #SIMATICS7-1500ET200pro:CPU1516PROF-2PN #SIMATICS7-1500ET200pro:CPU1516PRO-2PN #SIMATICS7-1500SoftwareControllerCPU1507SFV2 #SIMATICS7-1500SoftwareControllerCPU1507SFV3 #SIMATICS7-1500SoftwareControllerCPU1507SFV4 #SIMATICS7-1500SoftwareControllerCPU1507SV2 #SIMATICS7-1500SoftwareControllerCPU1507SV3 #SIMATICS7-1500SoftwareControllerCPU1507SV4 #SIMATICS7-1500SoftwareControllerCPU1508SFV2 #SIMATICS7-1500SoftwareControllerCPU1508SFV3 #SIMATICS7-1500SoftwareControllerCPU1508SFV4 #SIMATICS7-1500SoftwareControllerCPU1508STV3 #SIMATICS7-1500SoftwareControllerCPU1508STFV3 #SIMATICS7-1500SoftwareControllerCPU1508SV2 #SIMATICS7-1500SoftwareControllerCPU1508SV3 #SIMATICS7-1500SoftwareControllerCPU1508SV4 #SIMATICS7-1500SoftwareControllerLinuxV2 #SIMATICS7-1500SoftwareControllerLinuxV3 #SIMATICS7-PLCSIMAdvanced #SIPLUSET200SPCPU1510SPF-1PN #SIPLUSET200SPCPU1510SPF-1PNRAIL #SIPLUSET200SPCPU1510SP-1PN #SIPLUSET200SPCPU1510SP-1PNRAIL #SIPLUSET200SPCPU1512SPF-1PN #SIPLUSET200SPCPU1512SPF-1PNRAIL #SIPLUSET200SPCPU1512SP-1PN #SIPLUSET200SPCPU1512SP-1PNRAIL #SIPLUSS7-1500CPU1511-1PN #SIPLUSS7-1500CPU1511-1PNT1RAIL #SIPLUSS7-1500CPU1511-1PNTXRAIL #SIPLUSS7-1500CPU1511F-1PN #SIPLUSS7-1500CPU1513-1PN #SIPLUSS7-1500CPU1513F-1PN #SIPLUSS7-1500CPU1515F-2PN #SIPLUSS7-1500CPU1515F-2PNRAIL #SIPLUSS7-1500CPU1515F-2PNT2RAIL #SIPLUSS7-1500CPU1516-3PN/DP #SIPLUSS7-1500CPU1516-3PN/DPRAIL #SIPLUSS7-1500CPU1516-3PN/DPTXRAIL #SIPLUSS7-1500CPU1516F-3PN/DP #SIPLUSS7-1500CPU1516F-3PN/DPRAIL #SIPLUSS7-1500CPU1518-4PN/DP #SIPLUSS7-1500CPU1518-4PN/DPMFP #SIPLUSS7-1500CPU1518F-4PN/DP#CVE_2026_63350#bot", "url": "https://infosec.exchange/users/cve/statuses/117432937199045653"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:57:34.989Z", "date_only": false, "value": "2026-10-13T09:57:34.989154Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117433005151703305", "record": "CVE-2026-63350", "field": "creation_timestamp", "uuid": "2be75c38-2431-4ec5-9408-cddae48b181c", "content": "\u26a0\ufe0f The severity is increased for this new vulnerability affecting Siemens SIMATIC Drive Controller CPU 1504D TF and other products (CVE-2026-63350) https://vuldb.com/vuln/417509", "url": "https://infosec.exchange/users/vuldb/statuses/117433005151703305"}, {"timestamp": "2026-10-13T10:00:06.380Z", "date_only": false, "value": "2026-10-13T10:00:06.380979Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqrkka2rd2x", "record": "CVE-2026-63350", "field": "creation_timestamp", "uuid": "3c28c783-93cc-4a54-ba92-3c5119bc1996", "content": "CVE-2026-63350 - simatic s7-1500 cpu 1511-1 pn\nSiemens control units can accept trace files without checking for hidden scripts. If a user with read\u2011only diagnostic permission opens a specially crafted file,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siemens #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqrkka2rd2x"}, {"timestamp": "2026-10-13T10:17:16Z", "date_only": false, "value": "2026-10-13T10:17:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F4M3-J7VM-PP4X", "record": "GHSA-F4M3-J7VM-PP4X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T10:17:16.777Z", "date_only": false, "value": "2026-10-13T10:17:16.777", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63350", "record": "FKIE_CVE-2026-63350", "field": "published"}, {"timestamp": "2026-10-13T12:07:17.178Z", "date_only": false, "value": "2026-10-13T12:07:17.178710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqynx5o6w2n", "record": "CVE-2026-63350", "field": "creation_timestamp", "uuid": "26c59afd-1736-4c1f-b7d8-6ccd6d72bea2", "content": "\ud83d\udea8 CVE-2026-63350 \u2014 CVSS 9.4 CRITICAL\n\nAffected devices do not properly restrict executable content contained in imported trace files. This could ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63350\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqynx5o6w2n"}, {"timestamp": "2026-10-13T12:32:57Z", "date_only": false, "value": "2026-10-13T12:32:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F4M3-J7VM-PP4X", "record": "GHSA-F4M3-J7VM-PP4X", "field": "published"}, {"timestamp": "2026-10-13T12:32:57Z", "date_only": false, "value": "2026-10-13T12:32:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F4M3-J7VM-PP4X", "record": "GHSA-F4M3-J7VM-PP4X", "field": "modified"}, {"timestamp": "2026-10-13T12:56:21.050Z", "date_only": false, "value": "2026-10-13T12:56:21.050475Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63350", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T12:56:21.050Z", "date_only": false, "value": "2026-10-13T12:56:21.050475Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63350", "record": "FKIE_CVE-2026-63350", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T12:56:38.704Z", "date_only": false, "value": "2026-10-13T12:56:38.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63350", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T12:56:38.704Z", "date_only": false, "value": "2026-10-13T12:56:38.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63350", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T13:19:05.215Z", "date_only": false, "value": "2026-10-13T13:19:05.215318Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxr4od4alv2o", "record": "CVE-2026-63350", "field": "creation_timestamp", "uuid": "ab605922-51ec-4a7e-8fa7-bfe5fb184360", "content": "Correction: these three Siemens flaws (CVE-2026-63350, -63353, -63354) affect dozens of SIMATIC products, including the S7-1500 PLC family, not just the Drive Controller CPU 1504D TF.\n\nSiemens rates each 9.6 (CVSS 3.1). Story updated.", "url": "https://bsky.app/profile/thecircuitry.to/post/3mxr4od4alv2o"}, {"timestamp": "2026-10-15T20:38:04.303Z", "date_only": false, "value": "2026-10-15T20:38:04.303", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63350", "record": "FKIE_CVE-2026-63350", "field": "lastModified"}]}