Siemens WinCC
Brief
View CSAF
Summary
Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions.
Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available. The following versions of Siemens WinCC are affected: SIMATIC WinCC V7. 5 vers:all/* (CVE-2026-59241) SIMATIC WinCC V8. 0 vers:intdot/8.
- 0. 11 (CVE-2026-59241) SIMATIC WinCC V8. 1 vers:intdot/8.
- 7 (CVE-2026-59241) CVSS Vendor Equipment
v3 8. 8 Siemens SIMATIC WinCC V7. 5