CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a local attacker with physical or administrative access to the device to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled, potentially leading to a full loss of confidentiality, integrity, and availability of the device.

• CWE-1394

• https://cert-portal.siemens.com/productcert/html/ssa-159454.html

Published

Oct 13, 2026

Last Modified

Oct 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-72885Dokploy is a free, self-hostable Platform as a Service (PaaS…0
• CVE-2026-72886Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72887Net::OAuth::Client versions before 0.32 for Perl allow the s…9.8
• CVE-2026-72888Net::OAuth versions before 0.32 for Perl allow memory exhaus…6.5
• CVE-2026-72889Net::OAuth versions before 0.33 for Perl allow the sender to…9.8
• CVE-2026-7289A vulnerability was found in D-Link DIR-825M 1.1.12. This is…8.8
• CVE-2026-72897Issue summary: A TLS server that calls SSL_set_SSL_CTX() to …7.5
• CVE-2026-72898Metabase allows a remote, unauthenticated attacker to inject…10
• CVE-2026-72899Metabase allows an unauthenticated attacker to inject arbitr…10
• CVE-2026-7290A vulnerability was determined in JeecgBoot up to 3.9.1. Imp…6.3
• CVE-2026-72900Metabase allows an authenticated, low-privileged attacker to…6.5
• CVE-2026-72901Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9