{"metadata": {"vulnerability": "CVE-2026-63355", "count": 23, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 15}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-16T14:30:16.083Z", "date_only": false, "value": "2026-07-16T14:30:16.083Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63355", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "last_revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-591731", "record": "SSA-591731", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:18:45.851Z", "date_only": false, "value": "2026-10-13T09:18:45.851Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63355", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T09:18:45.851Z", "date_only": false, "value": "2026-10-13T09:18:45.851Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2026-63355", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T09:43:40.284Z", "date_only": false, "value": "2026-10-13T09:43:40.284928Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432950420904108", "record": "CVE-2026-63355", "field": "creation_timestamp", "uuid": "69ff0ee9-1f86-4d51-b6a8-8b7f9b62506f", "content": "CVE-2026-63355  Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page.\nThis could allow an attacker to social engineer an authorized user who holds the function right \u201cRead diagnostics\u201d into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user\u2019s browser session when the user subsequently interacts with an affected selection menu.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63355https://cert-portal.siemens.com/productcert/html/ssa-591731.html#Siemens #SIMATICDriveControllerCPU1504DTF #SIMATICDriveControllerCPU1507DTF #SIMATICET200SPCPU1510SPF-1PN #SIMATICET200SPCPU1510SP-1PN #SIMATICET200SPCPU1512SPF-1PN #SIMATICET200SPCPU1512SP-1PN #SIMATICET200SPCPU1514SPF-2PN #SIMATICET200SPCPU1514SP-2PN #SIMATICET200SPCPU1514SPTF-2PN #SIMATICET200SPCPU1514SPT-2PN #SIMATICET200SPOpenControllerCPU1515SPPC(incl.SIPLUSvariants) #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V2CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-IndustrialOS #SIMATICET200SPOpenControllerCPU1515SPPC2(incl.SIPLUSvariants)V3CPUs-WindowsOS #SIMATICET200SPOpenControllerCPU1515SPPC3V4CPUs #SIMATICS7-1500CPU1511-1PN #SIMATICS7-1500CPU1511C-1PN #SIMATICS7-1500CPU1511F-1PN #SIMATICS7-1500CPU1511T-1PN #SIMATICS7-1500CPU1511TF-1PN #SIMATICS7-1500CPU1512C-1PN #SIMATICS7-1500CPU1513-1PN #SIMATICS7-1500CPU1513F-1PN #SIMATICS7-1500CPU1513proF-2PN #SIMATICS7-1500CPU1513pro-2PN #SIMATICS7-1500CPU1515-2PN #SIMATICS7-1500CPU1515F-2PN #SIMATICS7-1500CPU1515T-2PN #SIMATICS7-1500CPU1515TF-2PN #SIMATICS7-1500CPU1516-3PN/DP #SIMATICS7-1500CPU1516F-3PN/DP #SIMATICS7-1500CPU1516proF-2PN #SIMATICS7-1500CPU1516pro-2PN #SIMATICS7-1500CPU1516T-3PN #SIMATICS7-1500CPU1516T-3PN/DP #SIMATICS7-1500CPU1516TF-3PN #SIMATICS7-1500CPU1516TF-3PN/DP #SIMATICS7-1500CPU1517-3PN #SIMATICS7-1500CPU1517-3PN/DP #SIMATICS7-1500CPU1517F-3PN #SIMATICS7-1500CPU1517F-3PN/DP #SIMATICS7-1500CPU1517T-3PN #SIMATICS7-1500CPU1517T-3PN/DP #SIMATICS7-1500CPU1517TF-3PN #SIMATICS7-1500CPU1517TF-3PN/DP #SIMATICS7-1500CPU1518-3PN #SIMATICS7-1500CPU1518-4PN/DP #SIMATICS7-1500CPU1518-4PN/DPMFP #SIMATICS7-1500CPU1518F-3PN #SIMATICS7-1500CPU1518F-4PN/DP #SIMATICS7-1500CPU1518F-4PN/DPMFP #SIMATICS7-1500CPU1518T-3PN #SIMATICS7-1500CPU1518T-4PN/DP #SIMATICS7-1500CPU1518TF-3PN #SIMATICS7-1500CPU1518TF-4PN/DP #SIMATICS7-1500CPUS7-1518-4PN/DPODK #SIMATICS7-1500CPUS7-1518F-4PN/DPODK #SIMATICS7-1500ET200pro:CPU1513PROF-2PN #SIMATICS7-1500ET200pro:CPU1513PRO-2PN #SIMATICS7-1500ET200pro:CPU1516PROF-2PN #SIMATICS7-1500ET200pro:CPU1516PRO-2PN #SIMATICS7-1500SoftwareControllerCPU1507SFV2 #SIMATICS7-1500SoftwareControllerCPU1507SFV3 #SIMATICS7-1500SoftwareControllerCPU1507SFV4 #SIMATICS7-1500SoftwareControllerCPU1507SV2 #SIMATICS7-1500SoftwareControllerCPU1507SV3 #SIMATICS7-1500SoftwareControllerCPU1507SV4 #SIMATICS7-1500SoftwareControllerCPU1508SFV2 #SIMATICS7-1500SoftwareControllerCPU1508SFV3 #SIMATICS7-1500SoftwareControllerCPU1508SFV4 #SIMATICS7-1500SoftwareControllerCPU1508STV3 #SIMATICS7-1500SoftwareControllerCPU1508STFV3 #SIMATICS7-1500SoftwareControllerCPU1508SV2 #SIMATICS7-1500SoftwareControllerCPU1508SV3 #SIMATICS7-1500SoftwareControllerCPU1508SV4 #SIMATICS7-1500SoftwareControllerLinuxV2 #SIMATICS7-1500SoftwareControllerLinuxV3 #SIMATICS7-PLCSIMAdvanced #SIPLUSET200SPCPU1510SPF-1PN #SIPLUSET200SPCPU1510SPF-1PNRAIL #SIPLUSET200SPCPU1510SP-1PN #SIPLUSET200SPCPU1510SP-1PNRAIL #SIPLUSET200SPCPU1512SPF-1PN #SIPLUSET200SPCPU1512SPF-1PNRAIL #SIPLUSET200SPCPU1512SP-1PN #SIPLUSET200SPCPU1512SP-1PNRAIL #SIPLUSS7-1500CPU1511-1PN #SIPLUSS7-1500CPU1511-1PNT1RAIL #SIPLUSS7-1500CPU1511-1PNTXRAIL #SIPLUSS7-1500CPU1511F-1PN #SIPLUSS7-1500CPU1513-1PN #SIPLUSS7-1500CPU1513F-1PN #SIPLUSS7-1500CPU1515F-2PN #SIPLUSS7-1500CPU1515F-2PNRAIL #SIPLUSS7-1500CPU1515F-2PNT2RAIL #SIPLUSS7-1500CPU1516-3PN/DP #SIPLUSS7-1500CPU1516-3PN/DPRAIL #SIPLUSS7-1500CPU1516-3PN/DPTXRAIL #SIPLUSS7-1500CPU1516F-3PN/DP #SIPLUSS7-1500CPU1516F-3PN/DPRAIL #SIPLUSS7-1500CPU1518-4PN/DP #SIPLUSS7-1500CPU1518-4PN/DPMFP #SIPLUSS7-1500CPU1518F-4PN/DP#CVE_2026_63355#bot", "url": "https://infosec.exchange/users/cve/statuses/117432950420904108"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T09:43:45.813Z", "date_only": false, "value": "2026-10-13T09:43:45.813931Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0415", "record": "NCSC-2026-0415", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T10:17:18Z", "date_only": false, "value": "2026-10-13T10:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GQQX-3F3W-HQVF", "record": "GHSA-GQQX-3F3W-HQVF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T10:17:18.870Z", "date_only": false, "value": "2026-10-13T10:17:18.870", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63355", "record": "FKIE_CVE-2026-63355", "field": "published"}, {"timestamp": "2026-10-13T12:33:00Z", "date_only": false, "value": "2026-10-13T12:33:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GQQX-3F3W-HQVF", "record": "GHSA-GQQX-3F3W-HQVF", "field": "published"}, {"timestamp": "2026-10-13T12:33:01Z", "date_only": false, "value": "2026-10-13T12:33:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GQQX-3F3W-HQVF", "record": "GHSA-GQQX-3F3W-HQVF", "field": "modified"}, {"timestamp": "2026-10-13T12:56:56.229Z", "date_only": false, "value": "2026-10-13T12:56:56.229715Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63355", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T12:56:56.229Z", "date_only": false, "value": "2026-10-13T12:56:56.229715Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63355", "record": "FKIE_CVE-2026-63355", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T12:57:19.926Z", "date_only": false, "value": "2026-10-13T12:57:19.926Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63355", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T12:57:19.926Z", "date_only": false, "value": "2026-10-13T12:57:19.926Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-63355", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T13:17:31.007Z", "date_only": false, "value": "2026-10-13T13:17:31.007", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63355", "record": "FKIE_CVE-2026-63355", "field": "lastModified"}]}