CVE-2026-41551
View CSAF Summary ROS# contains a ROS service file_server, that before version 2.2.2 contains a path traversal vulnerability which could allow an attacker to access, i.e. read and write, arbitrary ...
Affects 0 products across 2 vendors.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
The Siemens ROS# service file_server in versions prior to 2.2.2 contains a path traversal vulnerability, allowing attackers to read and write arbitrary files on the system. This poses significant risks to the integrity and confidentiality of the system. Siemens recommends updating to the latest version to mitigate this vulnerability.
BSID: BS-2026-GLOBAL-296561-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2026-41551?
What is the CVSS score for CVE-2026-41551?
Is CVE-2026-41551 actively exploited?
How do I remediate CVE-2026-41551?
What systems are affected by CVE-2026-41551?
What NERC-CIP standard applies to CVE-2026-41551?
What IEC 62443 requirement maps to CVE-2026-41551?
| CVE ID | CVE-2026-41551 |
|---|---|
| BSID | BS-2026-GLOBAL-296561-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| Published | 2026-05-14 |
| Last Modified | 2026-05-14 |
| ICS Relevance | 55% |
| Weakness (CWE) | |
| Verticals | |
| Source | NVD |
View CSAF Summary ROS# contains a ROS service file_server, that before version 2.2.2 contains a path traversal vulnerability which could allow an attacker to access, i.e. read and write, arbitrary files, which are accessible with the user rights of the user that runs the service, on the system that hosts service. Siemens has released a new version for ROS# and recommends to update to the latest version. The following versions of Siemens Siemens ROS# are affected: ROS# vers:intdot/<2.2.2 CVSS Ven
Source: NIST NVD / MITRE CVE Database
The vulnerability can be exploited remotely without authentication, requiring low skill level. An attacker can leverage this vulnerability to traverse directories and access sensitive files, potentially leading to unauthorized modifications or data exfiltration.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Fixed Version |
|---|---|---|
| Fujitsu-Siemens | — | — |
| Siemens | — | — |
No patch URL on record. Monitor vendor security advisories directly.
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement strict input validation and sanitization for all file paths used by the ROS# service. Restrict the service's file system access to a designated directory with minimal permissions.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. SAGE only publishes a network rule when a concrete on-the-wire signature can be grounded in the advisory.
This CVE violates CIP-007-R2 as it allows unauthorized access to critical cyber assets, compromising the integrity and confidentiality of the system.
This CVE maps to SR 7.6 because it involves a vulnerability that can be exploited to gain unauthorized access to system resources, which is a key security requirement for protecting against such threats.
Virtual patch generated by CITED Relevance SAGE. Validate in isolated environment before production deployment. Compensating control only - does not replace vendor patch.
SAGE Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | c76e719f135e12d484036d34c2a87817b25cc6491e9b57daf4d16ecef646aa7e1622339a84b016f1687344a9cc38046c93fa8ffb35eef5a8014a0468521a9da3 |
Critical Severity - Know Your Exposure
A CVSS 9.1 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Check Your Assets Free →