As cited
Copy frozen at (site build).
vulnerabilities
Siemens Teamcenter
A reflected cross-site scripting (XSS) vulnerability in Siemens Teamcenter's authentication redirect flow (/auth/ endpoint) allows unauthenticated attackers to inject JavaScript into authenticated users' sessions via malicious URLs. CVE-2026-58113 affects Teamcenter versions V2412, V2506, V2512, and V2606 with a CVSS score of 6.1. Siemens has released patched versions and recommends immediate updates.
Why it matters: Organizations using Siemens Teamcenter must patch immediately, as attackers can hijack authenticated user sessions to read data or perform unauthorized actions if users click malicious links.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Siemens Teamcenter
A reflected cross-site scripting (XSS) vulnerability in Siemens Teamcenter's authentication redirect flow allows unauthenticated attackers to inject JavaScript into authenticated user sessions via a crafted URL. The flaw affects Teamcenter versions V2412, V2506, V2512, and V2606, and Siemens has released patched versions for each line. Administrators should update to the specified fixed versions immediately.
Why it matters: Organizations using Siemens Teamcenter must patch affected versions to prevent attackers from hijacking user sessions, reading sensitive data, or performing unauthorized actions within the PLM system.
- Source published
- First seen by Cybersecurity Tracker