HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-85114 — A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webser...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, repla

Analysis

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application. CVSS Score: 7.5. Published: 2026-10-13T10:17:20.640.

Indicators of Compromise (1)

CVE (1)
CVE-2026-85114
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 13, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

Siemens SIMATIC S7 Webserver API

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-10.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a n

CVE-2026-85114CVE-2026-85115
CISA Advisories
MEDIUMVulnerabilityNEW

US FCC Votes to Cut Off Device Testing in China by 2028

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-fcc-votes-to-cut-off-device-testing-in-china-by-2028-image_small-5-a-33251.jpg" align=right hspace=4><b>Carr Says Labs See Sensitive Product Details Months Before Devices Launch</b><br>The U.S. Federal Communications Commission voted Thursday to stop recognizing test labs in China and other countries that won’t accept American

Bank Info Security
MEDIUMVulnerabilityNEW

Leaked DHS employee archive, Icepick, faces challenges to stay online

A DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home. The post Leaked DHS employee archive, Icepick, faces challenges to stay online appeared first on CyberScoop .

CyberScoop