Intel

CVE-2026-54798

SICAM: Active Debug Code (CVE-2026-54798)

highEPSS 0.4%

Affected

  • Siemens/SICAM range_unparsed *..8 Products <V26.20

Description

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.

Source: siemens_advisoryBSI CSAFBSI WID PortalNVD (NIST)CVE.org (MITRE)cvelistv5

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

SiemensSICAM
8 Products <V26.20

Metrics

XIEM Effective CVSS
7.1
Source: nvd-v4
EPSS percentile
33.3 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
high
Priority score
66.16
Exploit maturity
no public PoC known
CVSS v3
6.5
CVSS v4
7.1
EPSS score
0.4 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-09 15:16 UTC
CWE
CWE-489

Weakness classes (CWE)

  • CWE-489Base

    Active Debug Code

    The product is released with debugging code still enabled or active.

    cwe.mitre.org →

References & sources