HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-59241 — A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATI...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary comma

Analysis

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system. CVSS Score: 8.8. Published: 2026-10-13T10:17:16.623.

Indicators of Compromise (1)

CVE (1)
CVE-2026-59241
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 13, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

Siemens WinCC

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-13.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released n

CVE-2026-59241
CISA Advisories
MEDIUMVulnerabilityNEW

US FCC Votes to Cut Off Device Testing in China by 2028

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-fcc-votes-to-cut-off-device-testing-in-china-by-2028-image_small-5-a-33251.jpg" align=right hspace=4><b>Carr Says Labs See Sensitive Product Details Months Before Devices Launch</b><br>The U.S. Federal Communications Commission voted Thursday to stop recognizing test labs in China and other countries that won’t accept American

Bank Info Security
MEDIUMVulnerabilityNEW

Leaked DHS employee archive, Icepick, faces challenges to stay online

A DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home. The post Leaked DHS employee archive, Icepick, faces challenges to stay online appeared first on CyberScoop .

CyberScoop