CVE-2026-33892

CVE-2026-33892 is an authentication bypass vulnerability affecting multiple versions of Siemens Industrial Edge Management products (Pro V1, Pro V2, and Virtual editions). The flaw allows unauthenticated remote attackers to circumvent user authentication mechanisms and impersonate legitimate users by exploiting improper authentication enforcement on remote device connections. Successful exploitation requires the attacker to identify specific connection headers and ports while remote connection features are enabled. The vulnerability carries a HIGH severity rating with a CVSS score of 7.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L), indicating an attack achievable over the network with low complexity and no user privileges required. The attack vector demonstrates low attack complexity and results in potential confidentiality, integrity, and availability impacts through tunneling to affected devices. However, device-level security controls such as application-specific authentication remain unaffected by this vulnerability. There is currently no evidence of active exploitation, as the vulnerability is not listed on the Known Exploited Vulnerabilities (KEV) catalog and remains inactive on security hot lists. The EPSS score of 0.000990000 indicates this CVE has received minimal community attention relative to other published vulnerabilities. No publicly available exploit code has been reported at this time, though the moderate FAUCET Risk Score of 46.0/100 warrants prompt patching of affected systems.