Vendors and CVEs › CVEs › CVE-2026-59241
CVE-2026-59241: what it is, who is affected and what to do
A database privilege flaw in several SIMATIC WinCC versions could let an authenticated user with database access run commands on the host system. Siemens has released new versions for some products and is preparing further fixes.
- Known exploited. Not on CISA’s list when reported.
- CVSS. 8.8, as the source states.
- Records. CVE-2026-59241 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High
Siemens SIMATIC WinCC database flaw lets a user run commands on the host
A database privilege flaw in several SIMATIC WinCC versions could let an authenticated user with database access run commands on the host system.