ROS# vulnerabilities

2 known vulnerabilities in ROS# from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  ROS#: Improper Control of Generation of Code

  CVE-2026-109097Nov 10, 2026Siemens

  A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary c

• 9.1 Critical severity

  ROS#: Relative Path Traversal

  CVE-2026-41551May 12, 2026Siemens

  A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a path traversal vulnerability because user input is not properly sanitized. This could allow a remote attacker to access arbitrary files on the device.