Desigo CC family V9 vulnerabilities

3 known vulnerabilities in Desigo CC family V9 from Siemens. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Google Brotli Unchecked Return Value Exploited

  CVE-2026-111497Oct 22, 2026GoogleEPSS 82.6%

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a

• 8.2 High severity

  Desigo CC ClickOnce Client V6: Improper Control of Generation of Code

  CVE-2026-34223Sep 8, 2026Siemens

  A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versions), Desigo CC Flex C

• 9.8 Critical severity

  OpenSSL: Out-of-bounds Write

  CVE-2025-15467Jan 27, 2026OpenSSLEPSS 74.8%

  Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote co