Industrial Edge Management Virtual vulnerabilities

3 known vulnerabilities in Industrial Edge Management Virtual from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Red Hat build of Keycloak 26.4: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-18963Aug 18, 2026Red HatEPSS 8.09%

  A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for an

• 7.1 High severity

  Industrial Edge Management Pro V1: Authentication Bypass by Primary Weakness

  CVE-2026-33892Apr 14, 2026Siemens

  A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Management Virtual (All versions >= V2.2.0 < V2.8.0). Affected ma

• 10.0 Critical severity

  Industrial Edge Management Pro: Authorization Bypass Through User-Controlled Key

  CVE-2024-45032Sep 10, 2024Siemens

  A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly validate the device tokens. This could allow an unauthenticated rem