{"metadata": {"vulnerability": "CVE-2026-89208", "count": 37, "kinds": {"milestone": 10, "sighting": 2, "kev": 0, "other": 25}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-11T07:45:20.919Z", "date_only": false, "value": "2026-09-11T07:45:20.919Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-89208", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-295-04", "record": "ICSA-26-295-04", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-295-08", "record": "ICSA-26-295-08", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-055299", "record": "SSA-055299", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-333035", "record": "SSA-333035", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-295-04", "record": "ICSA-26-295-04", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-295-08", "record": "ICSA-26-295-08", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-055299", "record": "SSA-055299", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-333035", "record": "SSA-333035", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-055299", "record": "SSA-055299", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-333035", "record": "SSA-333035", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-13T09:19:12.086Z", "date_only": false, "value": "2026-10-13T09:19:12.086Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89208", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-13T09:19:12.086Z", "date_only": false, "value": "2026-10-13T09:19:12.086Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2026-89208", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-13T09:56:26.763Z", "date_only": false, "value": "2026-10-13T09:56:26.763960Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117433000665212622", "record": "CVE-2026-89208", "field": "creation_timestamp", "uuid": "1f055dca-d663-46fe-b5e0-26fb1db5ea0b", "content": "CVE-2026-89208  A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (All versions >= V2.3), Desigo PXC100-E.D (All versions >= V2.3), Desigo PXC12-E.D (All versions >= V2.3), Desigo PXC128-U (All versions >= V2.3), Desigo PXC200-E.D (All versions >= V2.3), Desigo PXC22-E.D (All versions >= V2.3), Desigo PXC22.1-E.D (All versions >= V2.3), Desigo PXC36.1-E.D (All versions >= V2.3), Desigo PXC50-E.D (All versions >= V2.3), Desigo PXC64-U (All versions >= V2.3), Desigo PXM20-E (All versions >= V2.3). The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89208https://cert-portal.siemens.com/productcert/html/ssa-055299.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-333035.html#Siemens #CapitalEmbeddedARClassic431-422 #CapitalEmbeddedARClassicR20-11 #DesigoPXC00-E.D #DesigoPXC00-U #DesigoPXC001-E.D #DesigoPXC100-E.D #DesigoPXC12-E.D #DesigoPXC128-U #DesigoPXC200-E.D #DesigoPXC22-E.D #DesigoPXC22.1-E.D #DesigoPXC36.1-E.D #DesigoPXC50-E.D #DesigoPXC64-U #DesigoPXM20-E#CVE_2026_89208#bot", "url": "https://infosec.exchange/users/cve/statuses/117433000665212622"}, {"timestamp": "2026-10-13T10:17:22Z", "date_only": false, "value": "2026-10-13T10:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3F9V-63RG-527J", "record": "GHSA-3F9V-63RG-527J", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-13T10:17:22.667Z", "date_only": false, "value": "2026-10-13T10:17:22.667", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89208", "record": "FKIE_CVE-2026-89208", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T12:32:58Z", "date_only": false, "value": "2026-10-13T12:32:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3F9V-63RG-527J", "record": "GHSA-3F9V-63RG-527J", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T12:32:58Z", "date_only": false, "value": "2026-10-13T12:32:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3F9V-63RG-527J", "record": "GHSA-3F9V-63RG-527J", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-13T15:48:47.827Z", "date_only": false, "value": "2026-10-13T15:48:47.827643Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89208", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T15:48:47.827Z", "date_only": false, "value": "2026-10-13T15:48:47.827643Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89208", "record": "FKIE_CVE-2026-89208", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-13T16:20:06.901Z", "date_only": false, "value": "2026-10-13T16:20:06.901Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-89208", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:20:06.901Z", "date_only": false, "value": "2026-10-13T16:20:06.901Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89208", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T20:38:04.303Z", "date_only": false, "value": "2026-10-15T20:38:04.303", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89208", "record": "FKIE_CVE-2026-89208", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-20T15:18:24.607Z", "date_only": false, "value": "2026-10-20T15:18:24.607422Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-295-04", "record": "ICSA-26-295-04", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-20T15:18:25.038Z", "date_only": false, "value": "2026-10-20T15:18:25.038645Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-295-08", "record": "ICSA-26-295-08", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-22T06:00:00Z", "date_only": false, "value": "2026-10-22T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-295-04", "record": "ICSA-26-295-04", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-22T06:00:00Z", "date_only": false, "value": "2026-10-22T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-295-08", "record": "ICSA-26-295-08", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-22T06:00:00Z", "date_only": false, "value": "2026-10-22T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-295-04", "record": "ICSA-26-295-04", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-22T06:00:00Z", "date_only": false, "value": "2026-10-22T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-295-08", "record": "ICSA-26-295-08", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-28T11:33:12Z", "date_only": false, "value": "2026-10-28T11:33:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1492", "record": "CVE-2026-89208", "field": "creation_timestamp", "uuid": "712eb6f4-74c2-4b8d-8c2b-553729e14382", "content": "\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0632\u06cc\u0645\u0646\u0633 Desigo PXC \u0648 PXM20-E Siemens Desigo PXC \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0633\u0627\u062e\u062a\u0645\u0627\u0646\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc BACnet/IP \u0647\u0633\u062a\u0646\u062f. Desigo PXM20-E - \u067e\u0646\u0644 \u0627\u067e\u0631\u0627\u062a\u0648\u0631 \u0628\u0631\u0627\u06cc \u062a\u0639\u0627\u0645\u0644 \u0628\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 BACnet/IP. \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 Desigo PXC00-E.D\u060c PXC00-U\u060c PXC001-E.D\u060c PXC12-E.D\u060c PXC22-E.D\u060c PXC22.1-E.D\u060c PXC36.1-E.D\u060c PXC50-E.D\u060c PXC64-U\u060c PXC100-E.D\u060c PXC128-U\u060c PXC200-E.D \u0648 PXM20-E \u0627\u0632 \u0646\u0633\u062e\u0647 \u0646\u0633\u062e\u0647 \u0646\u0633\u062e\u0647 2.3 \u0634\u0627\u0645\u0644. CVE-2026-89208, CVSS 6.9, CWE-125 \u0628\u0631\u0631\u0633\u06cc \u0646\u0627\u06a9\u0627\u0641\u06cc \u0645\u0631\u0632\u0647\u0627\u06cc \u0628\u0633\u062a\u0647 \u0634\u0628\u06a9\u0647 \u0648\u0631\u0648\u062f\u06cc \u0628\u0647 \u0646\u0641\u0648\u0630\u06af\u0631 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u062e\u0648\u0627\u0646\u062f\u0646 \u062d\u0627\u0641\u0638\u0647 \u0631\u0627 \u062f\u0631 \u062e\u0627\u0631\u062c \u0627\u0632 \u0645\u0646\u0637\u0642\u0647 \u0628\u0633\u062a\u0647 \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u0622\u063a\u0627\u0632 \u06a9\u0646\u062f. \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0644\u0627\u0632\u0645 \u0646\u06cc\u0633\u062a. \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0641\u0647\u0631\u0633\u062a \u0634\u062f\u0647\u060c \u0627\u0635\u0644\u0627\u062d \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u06cc\u0632\u06cc \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \u0645\u0646\u0628\u0639: Siemens ProductCert, SSA-333035 \u0645\u0648\u0631\u062e 13 \u0627\u06a9\u062a\u0628\u0631 2026 https://cert-portal.siemens.com/productcert/html/ssa-333035.html\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1492"}], "metrics": {"as_of": "2026-11-12T23:25:16.822Z", "anchors": {"origin": {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 2676316.822643, "hours": 743.4213396230556, "days": 30.97588915096065, "min_seconds": 2589916.822643, "max_seconds": 2676316.822643, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T23:25:16.822Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}