Siemens Teamcenter XSS via auth redirect ( V2606.2607)
CVE-2026-58113 Published on September 8, 2026
A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint). This could allow an unauthenticated remote attacker to inject arbitrary JavaScript into the browser of an authenticated user who loads a crafted URL, enabling the attacker to perform actions within the victim's Teamcenter session.
Weakness Type
What is a XSS Vulnerability?
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVE-2026-58113 has been classified to as a XSS vulnerability or weakness.
Affected Versions
Siemens Teamcenter V2412:- Before V2412.0013 is affected.
- Before V2506.0010 is affected.
- Before V2512.2607 is affected.
- Before V2606.2607 is affected.