A vulnerability in several versions of Siemens SIMATIC WinCC allows authenticated users with database access to execute commands on the host system. The flaw, tracked as CVE-2026-59241, stems from insufficient restriction of permissions assigned to a database role. Siemens has released updates for WinCC V8.0 and V8.1, but no fix is currently available for V7.5. CISA recommends organizations minimize network exposure and isolate control system networks to mitigate the risk.
Read the full story at cisa.gov.
Photo: bogitw / Pixabay
