CVE-2026-56451
CVSS Score
10.0
EPSS Score
0.4%
EPSS Percentile
30th
A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.
| CWE | CWE-347 |
| Vendor | siemens |
| Product | opcenter x |
| Ecosystems | |
| Industries | IndustrialManufacturing |
| Published | Jul 14, 2026 |
| Last Updated | Jul 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for siemens opcenter x
Be the first to know when new critical vulnerabilities affecting siemens opcenter x are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Siemens / Opcenter X
0 < V2604