Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

SIMATIC WinCC flaw lets database users run host commands

Original title: Siemens WinCC

CISA Advisoriesby CISA ()3 min read1
Read at cisa.gov
Part of a story covered by 3 sourcesCISA republishes Siemens CVE-2026-89208 advisories; some products unfixedMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

WinCC V7.5 has no fix; V8.0 and V8.1 are fixed in Update 11 and Update 7.

Siemens ProductCERT advisory SSA-550198, republished by CISA, says multiple SIMATIC WinCC versions assign excessive permissions to a database role. An authenticated remote attacker with database access can escalate privileges and execute arbitrary commands on the host running WinCC. CVSS v3.1 is 8.8. Siemens has fixes for V8.0 and V8.1 but none yet for V7.5.

Unconfirmed: The advisory does not say whether CVE-2026-59241 has been exploited.

Key facts
  • CVE-2026-59241 is CWE-266 Incorrect Privilege Assignment.
  • SIMATIC WinCC V7.5, all versions, has no fix available.
  • V8.0 before V8.0.0.11 is fixed in V8.0 Update 11 or later.
  • V8.1 before V8.1.7 is fixed in V8.1 Update 7 or later.
  • The attacker must already be authenticated and have database access.
Security assessment · AI, from the article

Impact: Authenticated database user can run arbitrary host commands

ProductAffectedFixed in
Siemens SIMATIC WinCC V7.5all—
Siemens SIMATIC WinCC V8.0<8.0.0.11V8.0 Update 11
Siemens SIMATIC WinCC V8.1<8.1.7V8.1 Update 7
What to do
  1. 1.Update SIMATIC WinCC V8.0 to V8.0 Update 11 or later.
  2. 2.Update SIMATIC WinCC V8.1 to V8.1 Update 7 or later.
  3. 3.Restrict network access to WinCC systems, especially V7.5, until a fix exists.
Analyze CVE-2026-59241 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-59241
ATT&CK
T1068 Exploitation for Privilege Escalation
Tags
siemenssimatic-winccicsprivilege-escalationscada
Vendors
Siemens
Products
SIMATIC WinCC
Organizations
CISASiemens ProductCERT

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-59241
Database-role privilege escalation in Siemens SIMATIC WinCC
8.7—

From the original article

3 min read at cisa.gov

View CSAF Summary Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.