Code Injection Vulnerability in Teamcenter Products by Siemens
CVE-2026-33862

8.5HIGH

What is CVE-2026-33862?

A security flaw has been identified in various versions of Teamcenter software by Siemens. The vulnerability arises from improper encoding and filtering of user-supplied data, which may allow attackers to inject malicious code. Such an exploitation could potentially enable an attacker to execute harmful scripts when other users access the affected pages. Organizations utilizing any of the specified Teamcenter versions should take immediate action to mitigate this risk.

Affected Version(s)

Teamcenter V2312 0

Teamcenter V2406 0

Teamcenter V2412 0

References

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.