CVE-2026-24032: Medium severity Siemens SINEC NMS (UMC) vulnerability
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application. (ZDI-CAN-27564)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24032?
CVE-2026-24032 has been classified as a high-severity vulnerability due to its potential for unauthenticated remote exploitation.
How do I fix CVE-2026-24032?
To mitigate CVE-2026-24032, upgrade SINEC NMS to version 4.0 SP3 or later.
Who is affected by CVE-2026-24032?
CVE-2026-24032 affects all versions of Siemens SINEC NMS (UMC) prior to 4.0 SP3.
What type of vulnerability is CVE-2026-24032?
CVE-2026-24032 is an authentication weakness that allows attackers to bypass authentication.
Can CVE-2026-24032 be exploited remotely?
Yes, CVE-2026-24032 can be exploited by unauthenticated remote attackers.