Advisories

Siemens WinCC

Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available. The following versions of Siemens WinCC are affected: SIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241) SIMATIC WinCC V8.0 vers:intdot/ SIMATIC

Read at CISA Cybersecurity Advisories

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS v3.1

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fix

not yet available

Exposure class

OT / ICS

• CISA Cybersecurity Advisories (cisa.gov)
• CVE-2026-59241 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 15
   CVE NVD 18d ago

   A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All…

   CVSS 8.8 CVE-2026-59241 Google