CVE-2026-46746: sinec ins through 1.0 (inclusive), 1.0 · update sp1, 1.0 · update sp2 (+5 more affected versions); +1 more affected…

Affected technology

sinec ins · through 1.0 (inclusive)
siemens

sinec ins · 1.0 · update sp1
siemens

sinec ins · 1.0 · update sp2
siemens

sinec ins · 1.0 · update sp2_update_1
siemens

sinec ins · 1.0 · update sp2_update_2
siemens

sinec ins · 1.0 · update sp2_update_3
siemens

sinec ins · 1.0 · update sp2_update_4
siemens

sinec ins · 1.0 · update sp2_update_5
siemens

SINEC INS · 0 to before V1.0 SP2 Update 6
Siemens

Description’s affected range: versions < V1.0 SP2 Update 6)

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated remote attacker could execute arbitrary commands on the underlying operating system with the privileges of the affected service user (sinecins). Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality, integrity and availability impact as high.