View CSAF

Summary

Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.

The following versions of Siemens WinCC are affected:

SIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241)

SIMATIC WinCC V8.0 vers:intdot/<8.0.0.11 (CVE-2026-59241)

SIMATIC WinCC V8.1 vers:intdot/<8.1.7 (CVE-2026-59241)

CVSS Vendor Equipment

v3 8.8 Siemens SIMATIC WinCC V7.5

1 Vulnerability

Incorrect Privilege Assignment

Background

Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities

Countries/Areas Deployed: Worldwide

Company…