Will Siemens SICAM 8 vulnerability be added to CISA KEV by Sept 2026?

CISA published an alert on July 19, 2026 detailing multiple vulnerabilities in Siemens SICAM 8 products (including SICAM A8000, S8000 firmware, CPCI85, SICORE). The vulnerabilities can lead to denial-of-service conditions. Siemens has released patches. Likelihood of KEV inclusion depends on exploitation evidence and vendor confirmation.

Resolution Criteria

CISA Known Exploited Vulnerabilities (KEV) catalog will be checked for any Siemens SICAM 8 CVE with confirmation of active exploitation or public PoC by September 30, 2026.