Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-59241

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SIMATIC WinCC V7.5

Default version status: unknown

  • 0 to < *affected

Siemens SIMATIC WinCC V8.0

Default version status: unknown

  • 0 to < V8.0 Update 11affected

Siemens SIMATIC WinCC V8.1

Default version status: unknown

  • 0 to < V8.1 Update 7affected

References