CVE-2026-46748: sinec ins through 1.0 (inclusive), 1.0 · update sp1, 1.0 · update sp2 (+5 more affected versions); +1 more affected…

Affected technology

sinec ins · through 1.0 (inclusive)
siemens

sinec ins · 1.0 · update sp1
siemens

sinec ins · 1.0 · update sp2
siemens

sinec ins · 1.0 · update sp2_update_1
siemens

sinec ins · 1.0 · update sp2_update_2
siemens

sinec ins · 1.0 · update sp2_update_3
siemens

sinec ins · 1.0 · update sp2_update_4
siemens

sinec ins · 1.0 · update sp2_update_5
siemens

SINEC INS · 0 to before V1.0 SP2 Update 6
Siemens

Description’s affected range: versions < V1.0 SP2 Update 6)

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

A local attacker could escalate privileges leading to arbitrary file modification and gaining root privileges on the system. Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality, integrity and availability impact as high.