There is a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system.
Siemens SIMATIC WinCC V7.5 is a powerful, sector-neutral SCADA (Supervisory Control and Data Acquisition) and operator control system developed for visualizing, monitoring, and managing industrial automation processes, production flows, and plants.
The following versions of Siemens WinCC suffer from the issue:
- SIMATIC WinCC V7.5 all versions
- SIMATIC WinCC V8.0, versions up to 8.0.0.11
- SIMATIC WinCC V8.1, versions up to 8.1.7
In the issue, the affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.
CVE-2026-59241 is the case number for the vulnerability, which has a CVSS V3 base score of 8.8.
Industrial Sectors
The product sees use in critical manufacturing, transportation systems, energy, healthcare and public health, financial services, and government services and facilities. It also sees action on a global basis.
In terms of mitigations,
- SIMATIC WinCC V7.5, no fix available right now
- SIMATIC WinCC V8.0, update to V8.0 Update 11 or later version
- SIMATIC WinCC V8.1, update to V8.1 Update 7 or later version
As a general security measure, Siemens recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens’ operational guidelines for Industrial Security.
Click here for additional information on Industrial Security by Siemens.
Click here to view other Siemens product security fixes.