Advisories

Siemens PSS(R)SINCAL

PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable. The following versions of Siemens PSS(R)SINCAL are affected: PSS(R)SINCAL V21.5 vers:all/* (CVE-2026-84854) PSS(R)SINCAL V22.0 vers:all/* (CVE-2026-

Read at CISA Cybersecurity Advisories

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS v3.1

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Fix

not yet available

Exposure class

OT / ICS

• CISA Cybersecurity Advisories (cisa.gov)
• CVE-2026-84854 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 10
   CVE NVD 25d ago

   In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause…

   CVSS 7.0 CVE-2026-84854 Microsoft