Get real-time updates on Telegram
CVE-2026-59241: SIMATIC WinCC V7.5 0 to before *; +2 more affected products
CVE-2026-59241. CVSS 3.1 base score 8.8 (GitHub Advisory Database).
Affected technology
SIMATIC WinCC V7.5 · 0 to before *
Siemens
SIMATIC WinCC V8.0 · 0 to before V8.0 Update 11
Siemens
SIMATIC WinCC V8.1 · 0 to before V8.1 Update 7
Siemens
Description’s affected range: versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7)
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
An authenticated remote attacker with database access could escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system. Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-266
- CCR priority
- 35.2 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · GitHub Advisory Database
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-13 13:59:32.738573+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-13 13:56:14.349801+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-59241.html