As cited
Copy frozen at (site build).
vulnerabilities
Siemens WinCC
Siemens has disclosed CVE-2026-59241, a privilege escalation vulnerability in SIMATIC WinCC that allows authenticated database users to execute arbitrary commands on affected systems. WinCC V7.5 has no fix available, while V8.0 and V8.1 require updates to V8.0.0.11 and V8.1.7 respectively. The vulnerability affects critical infrastructure sectors worldwide including manufacturing, energy, healthcare, and transportation.
Why it matters: Organizations running WinCC in critical infrastructure environments must prioritize patching V8.0 and V8.1 immediately and implement network segmentation for V7.5 systems until a fix becomes available, as authenticated database access can lead to full system compromise.
- Source published
- First seen by Cybersecurity Tracker