High Patch available CVSS 8.8
Siemens SIMATIC WinCC database flaw lets a user run commands on the host
CISA ICS AdvisoriesSiemens, SIMATIC WinCC · Critical Manufacturing, Transportation Systems, EnergyCVE-2026-59241
What happened. A database privilege flaw in several SIMATIC WinCC versions could let an authenticated user with database access run commands on the host system. Siemens has released new versions for some products and is preparing further fixes.
Who is affected. Siemens SIMATIC WinCC V7.5 (all versions), V8.0 before 8.0.0.11 and V8.1 before 8.1.7.
What to do. Check whether you run SIMATIC WinCC V7.5, V8.0 or V8.1, update to fixed versions where available, and apply Siemens' recommended mitigations where no fix exists.
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L2
Why: SIMATIC WinCC is supervisory control and data acquisition (SCADA) and HMI software, which runs on operator and server hosts at L2.
- Are you exposed?
Check your asset inventory for WinCC V7.5, V8.0 below 8.0.0.11, or V8.1 below 8.1.7, and review who holds database access.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CISA ICS Advisories (opens cisa.gov)
More on Siemens Manufacturing Transport Energy and power CVE-2026-59241