CVE-2026-59241
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.
| CWE | CWE-266 |
| Vendor | siemens |
| Product | simatic wincc v7.5 |
| Ecosystems | |
| Industries | IndustrialManufacturing |
| Published | Oct 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for siemens simatic wincc v7.5
Be the first to know when new high vulnerabilities affecting siemens simatic wincc v7.5 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Siemens / SIMATIC WinCC V7.5
0 < *
Siemens / SIMATIC WinCC V8.0
0 < V8.0 Update 11
Siemens / SIMATIC WinCC V8.1
0 < V8.1 Update 7