cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-253495.html CVE-2026-41918
MEDIUM
Siemens RUGGEDCOM RST2428P Sensitive Information Stored in Browser Cache
Record summary
CVE-2026-41918 has a selected CVSS score of 5.9 (medium).
Description
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user modify specific configurations. This could allow an authenticated attacker to access sensitive data stored in the browser.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 2, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
RUGGEDCOM RST2428PBrowse Siemens / RUGGEDCOM RST2428PDefault status: unknown | CVE List | Before V4.0 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-41918