Siemens SIMATIC WinCC: Schwachstelle ermöglicht Codeausführung
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIMATIC WinCC ausnutzen, um beliebigen Programmcode auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-44421 linked CVE
Open advisory with all CVEs
More on WinCC
Other advisories
- HighCVE-2026-59082Siemens SIMATIC WinCC: Schwachstelle ermöglicht Codeausführung
- HighCVE-2026-59082A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devi…
- HighCVE-2026-59241Siemens SIMATIC WinCC: Schwachstelle ermöglicht Privilegieneskalation
- HighCVE-2026-59241Siemens SIMATIC WinCC: fehlerhafte Rechtevergabe
- HighCVE-2026-59241Siemens SIMATIC WinCC: fehlerhafte Rechtevergabe
- HighCVE-2026-59241A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All version…
- HighCVE-2026-24349Siemens SIMATIC WinCC Unified PC Runtime: Sicherheitslücke
- HighCVE-2026-24349Siemens SIMATIC WinCC Unified PC Runtime: Sicherheitslücke
Other news entries
- Siemens SIMATIC WinCC: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- Siemens SIMATIC WinCC: Schwachstelle ermöglicht PrivilegieneskalationVulnerabilityBSI CERT-Bund
- Siemens TIA Portal (WinCC Unified PC Runtime): Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- Siemens TIA Portal (WinCC Unified PC Runtime): Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- SSA-363107 V1.2 (Last Update: 2023-07-11): An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk ModeNewsSiemens ProductCERT
- SSA-691715 V1.0: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens ProductsNewsSiemens ProductCERT
- SSA-363107 V1.0: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk ModeNewsSiemens ProductCERT
- SSA-753746 V1.0: Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software ProductsNewsSiemens ProductCERT
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4442
ID