{"metadata": {"vulnerability": "CVE-2026-63353", "count": 19, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-16T14:30:16.082Z", "date_only": false, "value": "2026-07-16T14:30:16.082Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63353", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:18:39.856Z", "date_only": false, "value": "2026-10-13T09:18:39.856Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63353", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T09:18:39.856Z", "date_only": false, "value": "2026-10-13T09:18:39.856Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63353", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:18:39.856Z", "date_only": false, "value": "2026-10-13T09:18:39.856Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2026-63353", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:42:19.828Z", "date_only": false, "value": "2026-10-13T09:42:19.828342Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432945128200310", "record": "CVE-2026-63353", "field": "creation_timestamp", "uuid": "c9e77388-4874-4fb6-85bb-1ab6a0edd3a9", "content": "CVE-2026-63353  Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.\nThis could allow an attacker to social engineer an authorized user who holds the function right \u201cRead diagnostics\u201d into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user\u2019s browser session and perform PLC operations through the web server within the scope of the user\u2019s authorization.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63353https://cert-portal.siemens.com/productcert/html/ssa-591731.html#Siemens #SIMATICDriveControllerCPU1504DTF #SIMATICDriveControllerCPU1507DTF #SIMATICET200SPCPU1510SPF-1PN #SIMATICET200SPCPU1510SP-1PN #SIMATICET200SPCPU1512SPF-1PN #SIMATICET200SPCPU1512SP-1PN #SIMATICET200SPCPU1514SPF-2PN #SIMATICET200SPCPU1514SP-2PN #SIMATICET200SPCPU1514SPTF-2PN #SIMATICET200SPCPU1514SPT-2PN #SIMATICET200SPOpenControllerCPU1515SPPC(incl.SIPLUSvariants) #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V2CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-IndustrialOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC3V4CPUs #SIMATICS7-1500CPU1511-1PN #SIMATICS7-1500CPU1511C-1PN #SIMATICS7-1500CPU1511F-1PN #SIMATICS7-1500CPU1511T-1PN #SIMATICS7-1500CPU1511TF-1PN #SIMATICS7-1500CPU1512C-1PN #SIMATICS7-1500CPU1513-1PN #SIMATICS7-1500CPU1513F-1PN #SIMATICS7-1500CPU1513proF-2PN #SIMATICS7-1500CPU1513pro-2PN #SIMATICS7-1500CPU1515-2PN #SIMATICS7-1500CPU1515F-2PN #SIMATICS7-1500CPU1515T-2PN #SIMATICS7-1500CPU1515TF-2PN #SIMATICS7-1500CPU1516-3PN/DP #SIMATICS7-1500CPU1516F-3PN/DP #SIMATICS7-1500CPU1516proF-2PN #SIMATICS7-1500CPU1516pro-2PN #SIMATICS7-1500CPU1516T-3PN #SIMATICS7-1500CPU1516T-3PN/DP #SIMATICS7-1500CPU1516TF-3PN #SIMATICS7-1500CPU1516TF-3PN/DP #SIMATICS7-1500CPU1517-3PN #SIMATICS7-1500CPU1517-3PN/DP #SIMATICS7-1500CPU1517F-3PN #SIMATICS7-1500CPU1517F-3PN/DP #SIMATICS7-1500CPU1517T-3PN #SIMATICS7-1500CPU1517T-3PN/DP #SIMATICS7-1500CPU1517TF-3PN #SIMATICS7-1500CPU1517TF-3PN/DP #SIMATICS7-1500CPU1518-3PN #SIMATICS7-1500CPU1518-4PN/DP #SIMATICS7-1500CPU1518-4PN/DPMFP #SIMATICS7-1500CPU1518F-3PN #SIMATICS7-1500CPU1518F-4PN/DP #SIMATICS7-1500CPU1518F-4PN/DPMFP #SIMATICS7-1500CPU1518T-3PN #SIMATICS7-1500CPU1518T-4PN/DP #SIMATICS7-1500CPU1518TF-3PN #SIMATICS7-1500CPU1518TF-4PN/DP #SIMATICS7-1500CPUS7-1518-4PN/DPODK #SIMATICS7-1500CPUS7-1518F-4PN/DPODK #SIMATICS7-1500ET200pro:CPU1513PROF-2PN #SIMATICS7-1500ET200pro:CPU1513PRO-2PN #SIMATICS7-1500ET200pro:CPU1516PROF-2PN #SIMATICS7-1500ET200pro:CPU1516PRO-2PN #SIMATICS7-1500SoftwareControllerCPU1507SFV2 #SIMATICS7-1500SoftwareControllerCPU1507SFV3 #SIMATICS7-1500SoftwareControllerCPU1507SFV4 #SIMATICS7-1500SoftwareControllerCPU1507SV2 #SIMATICS7-1500SoftwareControllerCPU1507SV3 #SIMATICS7-1500SoftwareControllerCPU1507SV4 #SIMATICS7-1500SoftwareControllerCPU1508SFV2 #SIMATICS7-1500SoftwareControllerCPU1508SFV3 #SIMATICS7-1500SoftwareControllerCPU1508SFV4 #SIMATICS7-1500SoftwareControllerCPU1508STV3 #SIMATICS7-1500SoftwareControllerCPU1508STFV3 #SIMATICS7-1500SoftwareControllerCPU1508SV2 #SIMATICS7-1500SoftwareControllerCPU1508SV3 #SIMATICS7-1500SoftwareControllerCPU1508SV4 #SIMATICS7-1500SoftwareControllerLinuxV2 #SIMATICS7-1500SoftwareControllerLinuxV3 #SIMATICS7-PLCSIMAdvanced #SIPLUSET200SPCPU1510SPF-1PN #SIPLUSET200SPCPU1510SPF-1PNRAIL #SIPLUSET200SPCPU1510SP-1PN #SIPLUSET200SPCPU1510SP-1PNRAIL #SIPLUSET200SPCPU1512SPF-1PN #SIPLUSET200SPCPU1512SPF-1PNRAIL #SIPLUSET200SPCPU1512SP-1PN #SIPLUSET200SPCPU1512SP-1PNRAIL #SIPLUSS7-1500CPU1511-1PN #SIPLUSS7-1500CPU1511-1PNT1RAIL #SIPLUSS7-1500CPU1511-1PNTXRAIL #SIPLUSS7-1500CPU1511F-1PN #SIPLUSS7-1500CPU1513-1PN #SIPLUSS7-1500CPU1513F-1PN #SIPLUSS7-1500CPU1515F-2PN #SIPLUSS7-1500CPU1515F-2PNRAIL #SIPLUSS7-1500CPU1515F-2PNT2RAIL #SIPLUSS7-1500CPU1516-3PN/DP #SIPLUSS7-1500CPU1516-3PN/DPRAIL #SIPLUSS7-1500CPU1516-3PN/DPTXRAIL #SIPLUSS7-1500CPU1516F-3PN/DP #SIPLUSS7-1500CPU1516F-3PN/DPRAIL #SIPLUSS7-1500CPU1518-4PN/DP #SIPLUSS7-1500CPU1518-4PN/DPMFP #SIPLUSS7-1500CPU1518F-4PN/DP#CVE_2026_63353#bot", "url": "https://infosec.exchange/users/cve/statuses/117432945128200310"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T10:10:04.345Z", "date_only": false, "value": "2026-10-13T10:10:04.345546Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqs4ehyaz2r", "record": "CVE-2026-63353", "field": "creation_timestamp", "uuid": "46d0663e-0c4d-4a75-9fc6-393f6e044a64", "content": "CVE-2026-63353 - simatic s7-1500 cpu 1511-1 pn\nThe CPUs display diagnostic trace data on a web page. If a trace file includes hidden script in its comment section, that script runs when the page loads, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siemens #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqs4ehyaz2r"}, {"timestamp": "2026-10-13T10:17:18Z", "date_only": false, "value": "2026-10-13T10:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QM94-Q84W-4CGF", "record": "GHSA-QM94-Q84W-4CGF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T10:17:18.040Z", "date_only": false, "value": "2026-10-13T10:17:18.040", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63353", "record": "FKIE_CVE-2026-63353", "field": "published"}, {"timestamp": "2026-10-13T10:17:18.040Z", "date_only": false, "value": "2026-10-13T10:17:18.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63353", "record": "FKIE_CVE-2026-63353", "field": "lastModified"}, {"timestamp": "2026-10-13T12:07:25.469Z", "date_only": false, "value": "2026-10-13T12:07:25.469562Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqyo7agxe2l", "record": "CVE-2026-63353", "field": "creation_timestamp", "uuid": "6cd60b48-7b82-458e-8b2f-ea2eb64dbfd6", "content": "\ud83d\udea8 CVE-2026-63353 \u2014 CVSS 9.4 CRITICAL\n\nAffected devices do not properly sanitize comment fields contained in imported trace files before rendering...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63353\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqyo7agxe2l"}, {"timestamp": "2026-10-13T12:33:01Z", "date_only": false, "value": "2026-10-13T12:33:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QM94-Q84W-4CGF", "record": "GHSA-QM94-Q84W-4CGF", "field": "published"}, {"timestamp": "2026-10-13T12:33:01Z", "date_only": false, "value": "2026-10-13T12:33:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QM94-Q84W-4CGF", "record": "GHSA-QM94-Q84W-4CGF", "field": "modified"}]}