{"id":"CVE-2026-44415","published":"2026-10-13T10:17:16.293","lastModified":"2026-10-15T20:38:04.303","description":"Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-35"],"vendors":[],"products":[],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-377139.html","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-832641.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability allows authenticated attackers to access internal APIs and paths that should be restricted, potentially leading to unauthorized system access or data deletion. This represents a critical authorization flaw where internal resources are exposed to users who shouldn't have access.","exploitability":"Exploitation requires an authenticated user account with remote access, making it moderately difficult to achieve initial compromise but relatively straightforward once the attacker has valid credentials.","blast_radius":"If exploited, this vulnerability could allow attackers to access sensitive internal information and potentially delete data or gain unauthorized system access, affecting all authenticated users and internal system components.","remediation":"No fixed version is published in the description. Disable the affected internal API endpoints or restrict access to them using authentication controls.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","api-access","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:55:46.190Z"}}