Arbitrary Code Execution Vulnerability in Siemens SIMATIC WinCC Products
CVE-2026-59082

8.5HIGH

Key Information:

Vendor

Siemens
Status
Simatic Wincc V7.5
Simatic Wincc V8.0
Simatic Wincc V8.1
Vendor
CVE Published:
10 November 2026

What is CVE-2026-59082?

A vulnerability has been identified in Siemens SIMATIC WinCC products that could allow an attacker to execute arbitrary code on affected devices. This occurs due to the implicit execution of active content when certain files are opened. Proper precautions and configurations are essential to safeguard against potential exploitation of this vulnerability.

Affected Version(s)

SIMATIC WinCC V7.5 0

SIMATIC WinCC V8.0 0

SIMATIC WinCC V8.1 0

References

https://cert-portal.siemens.com/productcert/html/ssa-9796...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.