Critical Vulnerability in Siemens Siveillance Control Exposed
Article Content
- •CVE-2026-50093 allows arbitrary file uploads in Siemens Siveillance Control.
- •Affected versions include Siveillance Control Pro V3.0 and V4.0, among others.
- •Siemens has released patches and recommends immediate updates to mitigate risks.
A vulnerability (CVE-2026-50093) has been identified in the Open Interface Services (OIS) web module of Siemens Siveillance Control and Siveillance Control Pro, allowing attackers to upload arbitrary files and potentially gain root-level access. Affected versions include Siveillance Control Pro V3.0 and V4.0, and Siveillance Control V3.0 and V4.0, with specific version thresholds noted. Siemens has released patches and updates to mitigate this vulnerability and recommends users update to the latest versions. The vulnerability poses a significant risk to critical infrastructure sectors, including manufacturing and communications. CISA has advised minimizing network exposure and implementing strong access controls. The vulnerability was published on September 8, 2026, and is currently being addressed by Siemens.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Siemens and CVE-2026-50093 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception A vulnerability, CVE-2026-121392, has been identified in FreeRDP versions prior to 3.32.2, which allows man-in-the-middle attackers to bypass server identity checks. The flaw arises from improper certificate validation in the tls_verify_certificate() function, permitting attackers with a trusted certificate to…