security_identifier

CVE-2026-67367

Identifier for a relative path traversal flaw in the embedded HTTP server file-serving endpoint of Siemens SIMOVE Fleetmanager and SIPLANT.

Current clusters

security1 publisher

CVE-2026-67367 lets an unauthenticated request read private keys off SIMOVE Fleetmanager hosts

Siemens ProductCERT reported the traversal itself, and fixed builds are out for four SIMOVE Fleetmanager branches and SIPLANT V3.1. For SIPLANT V1.7, V2.2 and V3.0 the advisory's remedy is an email to support.

Publishers:cisa.gov

Reality

Evidence68
Adoption: Insufficient
Hype gap+10
Incentives55
Confidence72