← Incidents
INCIDENT 634IntrusionLOW / UNDER REVIEWSourced
Siemens Desigo CC family
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-265-05.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that are executed on client application instances. Successful exploitation could lead to compromise of the client operating system and potential lat…
Last evidence update
22 SEP 2026 · 12:00 UTC
Source count
1
Status
reported
GermanyManufacturingDefenseCVE-2026-34223
Preceded by
Weak signals the observatory recorded before this incident became visible.
Observation history
How this record has evolved as evidence accumulated.
23 SEP · 05:22 UTC
Initial report
Evidence