All vulnerabilities
CVE-2026-102073

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet)

Siemens APOGEE MBC (PPC) (BACnet)
Open in ThreatlineRecord JSON
CVSS
8.2High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.46%Chance of exploitation activity in the next 30 days, higher than 38% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published13 Oct 2026Updated 14 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Vendor and government advisories 1

Vendors that say their products are affected, and agencies that issued alerts. Check each for the fixed release of the product you run.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.

Text from CVE List

Affected versions 10

  • APOGEE MBC (PPC) (BACnet)affected: and laterCVE List
  • APOGEE MBC (PPC) (P2 Ethernet)affected: and laterCVE List
  • APOGEE MEC (PPC) (BACnet)affected: and laterCVE List
  • APOGEE MEC (PPC) (P2 Ethernet)affected: and laterCVE List
  • APOGEE PXC Compact (BACnet)affected: all versions before V3.5.7CVE List
  • APOGEE PXC Compact (P2 Ethernet)affected: all versions before V2.8.21CVE List
  • APOGEE PXC Modular (BACnet)affected: all versions before V3.5.7CVE List
  • APOGEE PXC Modular (P2 Ethernet)affected: all versions before V2.8.21CVE List
  • TALON TC Compact (BACnet)affected: all versions before V3.5.7CVE List
  • TALON TC Modular (BACnet)affected: all versions before V3.5.7CVE List

References 1