CVE-2026-59082: High severity Siemens SIMATIC WinCC vulnerability
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Devices running any version of SIMATIC WinCC V7.5, V8.0, or V8.1 are affected. Exploitation requires a user to open a file containing active content.
What does an attacker need to exploit it?
The attacker needs to induce a user to open a malicious file. The vulnerability has local attack vector, low attack complexity, no required privileges, and requires user interaction.
What is the potential impact of successful exploitation?
A successful attack could cause the user to execute arbitrary code on the affected device. Confidentiality, integrity, and availability impacts are all rated high.