SIMATIC HMI MTP1500 Unified Comfort Panel neutral design vulnerabilities

2 known vulnerabilities in SIMATIC HMI MTP1500 Unified Comfort Panel neutral design from Siemens. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  SIMATIC HMI MTP1000 Unified Comfort Panel: Initialization of a Resource with an Insecure Default

  CVE-2026-27662May 12, 2026Siemens

  Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling

• 7.8 High severity

  Linux Kernel Incorrect Resource Transfer Between Spheres Exploited

  CVE-2026-31431Apr 22, 2026LinuxEPSS 98.1%

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_