CVE-2026-50093

State: Published
Severity: 8.9 High
Published: Sep 8, 2026
Updated: Sep 8, 2026
Reserved: Jun 3, 2026

Description

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.

Scores

CVSS	Score	Vector	Source
4.0	8.9 High	CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	siemens
3.1	9.0 Critical	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	siemens

Weaknesses

CWE-434 Unrestricted Upload of File with Dangerous Type

Affected Products

Product	Versions
Siveillance Control Pro V3.0Siemens	before V3.0.12.2173Affected
Siveillance Control Pro V4.0Siemens	before V4.0.9.2178Affected
Siveillance Control V3.0Siemens	before V3.0.22.2177Affected
Siveillance Control V4.0Siemens	before V4.0.11.2177Affected

References

https://cert-portal.siemens.com/productcert/html/ssa-254516.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.