---
cve: "CVE-2026-41918"
severity: "MEDIUM"
cvss: 5.9
epss: "19%"
vendor: "Siemens"
kev: false
exploited: false
published: "2026-06-02 14:16:53"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-08T17:10:39+02:00"
---

# CVE-2026-41918

> 5.9 MEDIUM

## Beschreibung

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user modify specific configurations. This could allow an authenticated attacker to access sensitive data stored in the browser.

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |

## Referenzen

- <https://cert-portal.siemens.com/productcert/html/ssa-253495.html>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-41918) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_