Threat+Constellation
Live— UTC
← Incidents
INCIDENT 634IntrusionLOW / UNDER REVIEWSourced

Siemens Desigo CC family

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-265-05.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that are executed on client application instances. Successful exploitation could lead to compromise of the client operating system and potential lat…

Last evidence update
22 SEP 2026 · 12:00 UTC
Source count
1
Status
reported
GermanyManufacturingDefenseCVE-2026-34223
Preceded by

Weak signals the observatory recorded before this incident became visible.

Observation history

How this record has evolved as evidence accumulated.

23 SEP · 05:22 UTC
Initial report
Evidence