CVE-2026-33862: teamcenter from 2312.0 (inclusive), before 2312.0014 (exclusive), from 2406.0 (inclusive), before 2406.0012…

Affected technology

teamcenter · from 2312.0 (inclusive), before 2312.0014 (exclusive)
siemens

teamcenter · from 2406.0 (inclusive), before 2406.0012 (exclusive)
siemens

teamcenter · from 2412.0 (inclusive), before 2412.0009 (exclusive)
siemens

teamcenter · from 2506.0 (inclusive), before 2506.0005 (exclusive)
siemens

Teamcenter V2312 · 0 to before V2312.0014
Siemens

Teamcenter V2406 · 0 to before V2406.0012
Siemens

Teamcenter V2412 · 0 to before V2412.0009
Siemens

Teamcenter V2506 · 0 to before V2506.0005
Siemens

Description’s affected range: versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.000

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · Passive user interaction

What an attacker can do

An attacker could inject malicious code that can be executed by other users when they visit the affected page. Vendor/CNA’s CVSS 4.0 assessment (base score 8.5/10) rates confidentiality and integrity impact as high; availability impact as none.