{"metadata": {"vulnerability": "cve-2026-63354", "count": 21, "kinds": {"milestone": 6, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-16T14:30:16.082Z", "date_only": false, "value": "2026-07-16T14:30:16.082Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-63354", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:18:42.867Z", "date_only": false, "value": "2026-10-13T09:18:42.867Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-63354", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T09:18:42.867Z", "date_only": false, "value": "2026-10-13T09:18:42.867Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-63354", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:18:42.867Z", "date_only": false, "value": "2026-10-13T09:18:42.867Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "cve-2026-63354", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:42:59.717Z", "date_only": false, "value": "2026-10-13T09:42:59.717875Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432947770240825", "record": "CVE-2026-63354", "field": "creation_timestamp", "uuid": "1089c17b-0037-4f94-bf3e-67d30222636e", "content": "CVE-2026-63354  Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page.\nThis could allow an attacker to social engineer an authorized user who holds the function right \u201cRead diagnostics\u201d into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user\u2019s browser session and perform PLC operations through the web server within the scope of the user\u2019s authorization.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63354https://cert-portal.siemens.com/productcert/html/ssa-591731.html#Siemens #SIMATICDriveControllerCPU1504DTF #SIMATICDriveControllerCPU1507DTF #SIMATICET200SPCPU1510SPF-1PN #SIMATICET200SPCPU1510SP-1PN #SIMATICET200SPCPU1512SPF-1PN #SIMATICET200SPCPU1512SP-1PN #SIMATICET200SPCPU1514SPF-2PN #SIMATICET200SPCPU1514SP-2PN #SIMATICET200SPCPU1514SPTF-2PN #SIMATICET200SPCPU1514SPT-2PN #SIMATICET200SPOpenControllerCPU1515SPPC(incl.SIPLUSvariants) #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V2CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-IndustrialOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC3V4CPUs #SIMATICS7-1500CPU1511-1PN #SIMATICS7-1500CPU1511C-1PN #SIMATICS7-1500CPU1511F-1PN #SIMATICS7-1500CPU1511T-1PN #SIMATICS7-1500CPU1511TF-1PN #SIMATICS7-1500CPU1512C-1PN #SIMATICS7-1500CPU1513-1PN #SIMATICS7-1500CPU1513F-1PN #SIMATICS7-1500CPU1513proF-2PN #SIMATICS7-1500CPU1513pro-2PN #SIMATICS7-1500CPU1515-2PN #SIMATICS7-1500CPU1515F-2PN #SIMATICS7-1500CPU1515T-2PN #SIMATICS7-1500CPU1515TF-2PN #SIMATICS7-1500CPU1516-3PN/DP #SIMATICS7-1500CPU1516F-3PN/DP #SIMATICS7-1500CPU1516proF-2PN #SIMATICS7-1500CPU1516pro-2PN #SIMATICS7-1500CPU1516T-3PN #SIMATICS7-1500CPU1516T-3PN/DP #SIMATICS7-1500CPU1516TF-3PN #SIMATICS7-1500CPU1516TF-3PN/DP #SIMATICS7-1500CPU1517-3PN #SIMATICS7-1500CPU1517-3PN/DP #SIMATICS7-1500CPU1517F-3PN #SIMATICS7-1500CPU1517F-3PN/DP #SIMATICS7-1500CPU1517T-3PN #SIMATICS7-1500CPU1517T-3PN/DP #SIMATICS7-1500CPU1517TF-3PN #SIMATICS7-1500CPU1517TF-3PN/DP #SIMATICS7-1500CPU1518-3PN #SIMATICS7-1500CPU1518-4PN/DP #SIMATICS7-1500CPU1518-4PN/DPMFP #SIMATICS7-1500CPU1518F-3PN #SIMATICS7-1500CPU1518F-4PN/DP #SIMATICS7-1500CPU1518F-4PN/DPMFP #SIMATICS7-1500CPU1518T-3PN #SIMATICS7-1500CPU1518T-4PN/DP #SIMATICS7-1500CPU1518TF-3PN #SIMATICS7-1500CPU1518TF-4PN/DP #SIMATICS7-1500CPUS7-1518-4PN/DPODK #SIMATICS7-1500CPUS7-1518F-4PN/DPODK #SIMATICS7-1500ET200pro:CPU1513PROF-2PN #SIMATICS7-1500ET200pro:CPU1513PRO-2PN #SIMATICS7-1500ET200pro:CPU1516PROF-2PN #SIMATICS7-1500ET200pro:CPU1516PRO-2PN #SIMATICS7-1500SoftwareControllerCPU1507SFV2 #SIMATICS7-1500SoftwareControllerCPU1507SFV3 #SIMATICS7-1500SoftwareControllerCPU1507SFV4 #SIMATICS7-1500SoftwareControllerCPU1507SV2 #SIMATICS7-1500SoftwareControllerCPU1507SV3 #SIMATICS7-1500SoftwareControllerCPU1507SV4 #SIMATICS7-1500SoftwareControllerCPU1508SFV2 #SIMATICS7-1500SoftwareControllerCPU1508SFV3 #SIMATICS7-1500SoftwareControllerCPU1508SFV4 #SIMATICS7-1500SoftwareControllerCPU1508STV3 #SIMATICS7-1500SoftwareControllerCPU1508STFV3 #SIMATICS7-1500SoftwareControllerCPU1508SV2 #SIMATICS7-1500SoftwareControllerCPU1508SV3 #SIMATICS7-1500SoftwareControllerCPU1508SV4 #SIMATICS7-1500SoftwareControllerLinuxV2 #SIMATICS7-1500SoftwareControllerLinuxV3 #SIMATICS7-PLCSIMAdvanced #SIPLUSET200SPCPU1510SPF-1PN #SIPLUSET200SPCPU1510SPF-1PNRAIL #SIPLUSET200SPCPU1510SP-1PN #SIPLUSET200SPCPU1510SP-1PNRAIL #SIPLUSET200SPCPU1512SPF-1PN #SIPLUSET200SPCPU1512SPF-1PNRAIL #SIPLUSET200SPCPU1512SP-1PN #SIPLUSET200SPCPU1512SP-1PNRAIL #SIPLUSS7-1500CPU1511-1PN #SIPLUSS7-1500CPU1511-1PNT1RAIL #SIPLUSS7-1500CPU1511-1PNTXRAIL #SIPLUSS7-1500CPU1511F-1PN #SIPLUSS7-1500CPU1513-1PN #SIPLUSS7-1500CPU1513F-1PN #SIPLUSS7-1500CPU1515F-2PN #SIPLUSS7-1500CPU1515F-2PNRAIL #SIPLUSS7-1500CPU1515F-2PNT2RAIL #SIPLUSS7-1500CPU1516-3PN/DP #SIPLUSS7-1500CPU1516-3PN/DPRAIL #SIPLUSS7-1500CPU1516-3PN/DPTXRAIL #SIPLUSS7-1500CPU1516F-3PN/DP #SIPLUSS7-1500CPU1516F-3PN/DPRAIL #SIPLUSS7-1500CPU1518-4PN/DP #SIPLUSS7-1500CPU1518-4PN/DPMFP #SIPLUSS7-1500CPU1518F-4PN/DP#CVE_2026_63354#bot", "url": "https://infosec.exchange/users/cve/statuses/117432947770240825"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T10:10:05.763Z", "date_only": false, "value": "2026-10-13T10:10:05.763434Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqs4friei24", "record": "CVE-2026-63354", "field": "creation_timestamp", "uuid": "7fcb972c-0dfc-43f5-a509-e40e6db2a5df", "content": "CVE-2026-63354 - simatic s7-1500 cpu 1511-1 pn\nCertain Siemens drive controller models can be tricked into loading specially crafted CSV trace files. This can cause unwanted JavaScript to run in a logged\u2011in user's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siemens #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqs4friei24"}, {"timestamp": "2026-10-13T10:17:18Z", "date_only": false, "value": "2026-10-13T10:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-42FQ-R5J4-9GWP", "record": "GHSA-42FQ-R5J4-9GWP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T10:17:18.450Z", "date_only": false, "value": "2026-10-13T10:17:18.450", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63354", "record": "FKIE_CVE-2026-63354", "field": "published"}, {"timestamp": "2026-10-13T10:17:18.450Z", "date_only": false, "value": "2026-10-13T10:17:18.450", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63354", "record": "FKIE_CVE-2026-63354", "field": "lastModified"}, {"timestamp": "2026-10-13T10:30:28.181Z", "date_only": false, "value": "2026-10-13T10:30:28.181320Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117433134448175846", "record": "cve-2026-63354", "field": "creation_timestamp", "uuid": "f8da16ce-ae1e-409a-a5aa-e19dacee6abc", "content": "Siemens SIMATIC Drive Controller CPU 1504D TF affected by CRITICAL XSS (CVE-2026-63354, CVSS 9.6). Malicious CSV imports can trigger attacker JS, risking PLC ops in user\u2019s context. Restrict file imports, review user rights. https://radar.offseq.com/threat/cve-2026-63354-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-ee3b56b4a64e8aeb #OffSeq #ICS #XSS #CVE202663354", "url": "https://infosec.exchange/users/offseq/statuses/117433134448175846"}, {"timestamp": "2026-10-13T10:30:30.187Z", "date_only": false, "value": "2026-10-13T10:30:30.187443Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxqtausnid2q", "record": "cve-2026-63354", "field": "creation_timestamp", "uuid": "deeee58b-4aaf-403c-ac7e-14a868697a0d", "content": "Siemens SIMATIC Drive Controller CPU 1504D TF: CRITICAL XSS (CVE-2026-63354, CVSS 9.6) exploitable via malicious CSV import. Restrict file imports and limit 'Read diagnostics' rights until patch available. https://radar.offseq.com/threat/cve-2026-63354-cwe-79-improper-neutralization-of-input-duri...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxqtausnid2q"}, {"timestamp": "2026-10-13T12:07:33.416Z", "date_only": false, "value": "2026-10-13T12:07:33.416472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqyogyari22", "record": "CVE-2026-63354", "field": "creation_timestamp", "uuid": "792d9ba9-efd9-456a-900b-9a5d8048a9cc", "content": "\ud83d\udea8 CVE-2026-63354 \u2014 CVSS 9.4 CRITICAL\n\nAffected devices do not properly validate and sanitize visual marker data contained in imported CSV trace f...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63354\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqyogyari22"}, {"timestamp": "2026-10-13T12:33:01Z", "date_only": false, "value": "2026-10-13T12:33:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-42FQ-R5J4-9GWP", "record": "GHSA-42FQ-R5J4-9GWP", "field": "published"}, {"timestamp": "2026-10-13T12:33:01Z", "date_only": false, "value": "2026-10-13T12:33:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-42FQ-R5J4-9GWP", "record": "GHSA-42FQ-R5J4-9GWP", "field": "modified"}]}