Siemens Industrial Edge Management Auth Bypass Enables Full Account Takeover

Siemens Industrial Edge Management contains an authentication bypass flaw, CVE-2026-18963, that could let an unauthenticated remote attacker fully take over an account by resetting user credentials without completing email verification.

Affected products include Industrial Edge Management Cloud and Industrial Edge Management Pro V1 versions below 1.15.20. Siemens has released fixed versions and recommends updating immediately.