CVE-2026-34223: Code Injection

Published Sep 8, 2026
·
Updated

A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versions), Desigo CC Flex Client V7 (All versions), Desigo CC Installed Client V6 (All versions), Desigo CC Installed Client V7 (All versions). The affected application is vulnerable to Client Code Execution (CCE) due to insufficient input validation when handling scripts embedded within user-defined graphics documents. Specifically, when the script within a graphics document is designed or modified by an attacker to include malicious commands. When a user opens a compromised graphics document, the embedded script is executed on the client application instance, allowing an attacker to write arbitrary files to the client's operating system. Successful exploitation requires an attacker to craft a malicious graphics document and entice a user with sufficient privileges to display it. This could lead to compromise of the client operating system and potential lateral movement within the organization.

Affected Software

8 affected components
Siemens Desigo CC ClickOnce Client=V6 (all versions)
Siemens Desigo CC ClickOnce Client=V7 (all versions)
Siemens Desigo CC family=V8 (all versions)
Siemens Desigo CC family=V9 (all versions)
Siemens Desigo CC Flex Client=V6 (all versions)
Siemens Desigo CC Flex Client=V7 (all versions)
Siemens Desigo CC Installed Client=V6 (all versions)
Siemens Desigo CC Installed Client=V7 (all versions)

Event History

Sep 8, 2026
CVE Published
via MITRE·08:11 AM
Data Sourced
via MITRE·08:11 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Which deployments are affected?

All versions of Desigo CC ClickOnce Client V6 and V7, Desigo CC Flex Client V6 and V7, Desigo CC Installed Client V6 and V7, and Desigo CC family V8 and V9 are affected.

2

What must an attacker do to exploit this issue?

An attacker must create or modify a user-defined graphics document so that its embedded script contains malicious commands. They must then persuade a user with sufficient privileges to open or display that compromised document.

3

Does exploitation require remote access or user interaction?

The provided vector identifies local attack access and requires both low privileges and user interaction. The user must display the compromised graphics document for its embedded script to execute in the client application.

4

What is the likely impact on a compromised client?

The malicious embedded script can write arbitrary files to the client operating system. This may compromise the client system and could enable lateral movement within the organization.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203