Siemens SIMATIC WinCC (V7.5, V8.0, V8.1) RCE via Implicit Active Content
CVE-2026-59082 Published on November 10, 2026
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device.
Weakness Type
Insufficient UI Warning of Dangerous Operations
The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.
Products Associated with CVE-2026-59082
Want to know whenever a new CVE is published for Siemens Simatic Wincc? stack.watch will email you.
Affected Versions
Siemens SIMATIC WinCC V7.5:- Before * is affected.
- Before * is affected.
- Before * is affected.