Siemens SIMATIC S7-1500 TM MFP Vulnerabilities

Siemens SIMATIC S7

Multiple vulnerabilities identified in Siemens SIMATIC S7-1500 TM MFP's GNU/Linux subsystem, affecting all versions.

Do this now

Restrict network access to the Siemens SIMATIC S7-1500 TM MFP and watch for a vendor fix.

First seen: 22 Oct 2026
Last update: 22 Oct 2026, 12:00 UTC
Source: news
On the menu as: Industrial & OT

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Siemens SIMATIC S7-1500 TM MFP Vulnerabilities
Severity: unknown. Patch status: no fix yet.
Affected: Siemens SIMATIC S7

Multiple vulnerabilities identified in Siemens SIMATIC S7-1500 TM MFP's GNU/Linux subsystem, affecting all versions.

## Steps
1. Search the repo, its CI and infra config for Siemens SIMATIC S7. If present, report the version in use and whether it's affected.
2. There is no fix yet. Until one ships: Multiple vulnerabilities identified in Siemens SIMATIC S7-1500 TM MFP's GNU/Linux subsystem, affecting all versions.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-16 https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11
https://pwned.coffee/i/siemens-simatic-s7-1500-tm-mfp-vulnerabilities

Receipt

Exploitation: No known exploitation
Score: No CVSS published yet: severity unknown.
Last checked: 24 Oct 2026, 18:17 UTC

Sources: KEV – CVE record – Vendor –

Sources

Totalone coffee