[Control systems] Siemens security advisory (AV26-212)

Serial number: AV26-212
Date: March 10, 2026

On March 10, 2026, Siemens published advisories to address vulnerabilities in multiple products. Included were updates for the following:

  • Heliox Flex 180 kW EV Charging Station – versions prior to F4.11.1
  • Heliox Mobile DC 40 kW EV Charging Station – versions prior to L4.10.1
  • Mendix Applications – all versions
  • RUGGEDCOM APE1808 – all versions with Fortigate NGFW prior to V7.4.11
  • RUGGEDCOM APE1808 – all versions with Fortigate NGFW prior to V7.4.10
  • SIDIS Prime – versions prior to V4.0.800
  • SICAM SIAPP SDK – versions prior to V2.1.7
  • SIMATIC S7-1500 – multiple versions

The Cyber Centre encourages users and administrators to review the web link provided, perform the suggested mitigations and apply the necessary updates.

Date modified: