CVE-2026-85114: Path Traversal

Q: Which deployments are affected?

Applications using the Siemens .NET Client Library for SIMATIC S7 Webserver API in versions earlier than V3.3.61 are affected.

Q: What must an attacker be able to do to exploit this issue?

The attacker must be able to manipulate the ticket response received by the application during a ticket download. No authentication or user interaction is required according to the supplied CVSS vector.

Q: When can existing files be replaced?

Existing files can be replaced only when overwriting is enabled and the files are accessible to the affected application. The vulnerability also allows writes outside the intended download directory.

Published Oct 13, 2026

Updated

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.

Affected Software

1 affected component

Siemens .NET Client Library for SIMATIC S7 Webserver API<3.3.61

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade .NET Client Library for SIMATIC S7 Webserver API to a version that resolves this vulnerability.
Fixed in V3.3.61

Event History

Oct 13, 2026

CVE Published

via MITRE·09:18 AM

Data Sourced

via MITRE·09:18 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Applications using the Siemens .NET Client Library for SIMATIC S7 Webserver API in versions earlier than V3.3.61 are affected.

What must an attacker be able to do to exploit this issue?

The attacker must be able to manipulate the ticket response received by the application during a ticket download. No authentication or user interaction is required according to the supplied CVSS vector.

When can existing files be replaced?

Existing files can be replaced only when overwriting is enabled and the files are accessible to the affected application. The vulnerability also allows writes outside the intended download directory.

CVE-2026-85114: Path Traversal

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What must an attacker be able to do to exploit this issue?

When can existing files be replaced?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What must an attacker be able to do to exploit this issue?

When can existing files be replaced?