CVE-2026-54801
CVSS Score
7.2
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains insufficient validation of authentication credentials when processing administrative account modifications through the web API. This could allow an authenticated attacker to bypass security controls and gain unauthorized elevated privileges.
| CWE | CWE-620 |
| Vendor | siemens |
| Product | cpci85 central processing/communication |
| Ecosystems | |
| Industries | IndustrialManufacturing |
| Published | Jul 9, 2026 |
| Last Updated | Jul 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for siemens cpci85 central processing/communication
Be the first to know when new high vulnerabilities affecting siemens cpci85 central processing/communication are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Siemens / CPCI85 Central Processing/Communication
0 < V26.20
Siemens / SICORE Base system
0 < V26.20.0