CVE-2026-27664

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0). The affected application contains an out-of-bounds write vulnerability while parsing specially crafted XML inputs. This could allow an unauthenticated attacker to exploit this issue by sending a malicious XML request, which may cause the service to crash, resulting in a denial-of-service condition.

• CWE-787

• https://cert-portal.siemens.com/productcert/html/ssa-246443.html
• https://seclists.org/fulldisclosure/2026/Apr/7

Published

Mar 26, 2026

Last Modified

Jun 17, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27659Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 1…4.6
• CVE-2026-2766Use-after-free in the JavaScript Engine: JIT component. This…9.8
• CVE-2026-27660Gitea versions before 1.25.5 allow draft release data or att…7.5
• CVE-2026-27661A vulnerability has been identified in SINEC Security Monito…5.3
• CVE-2026-27662Affected devices do not properly restrict access to the web …7.7
• CVE-2026-27663A vulnerability has been identified in CPCI85 Central Proces…7.1
• CVE-2026-27668A vulnerability has been identified in RUGGEDCOM CROSSBOW Se…8.8
• CVE-2026-2767Use-after-free in the JavaScript: WebAssembly component. Thi…9.8
• CVE-2026-27670OpenClaw versions prior to 2026.3.2 contain a race condition…5.8
• CVE-2026-27671Due to improper RFC protocol validation in the SAP Kernel us…9.8
• CVE-2026-27672The Material Master application does not enforce authorizati…4.3
• CVE-2026-27673Due to a missing authorization check, SAP S/4HANA (Private C…4.9