Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral

• CVE-2026-44415 Critical 9.1 Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which i 0.5%
• CVE-2026-27662 High 7.7 Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain 0.1%
• CVE-2025-40805 Critical 10.0 Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitima 0.7%