SIMATIC WinCC DB Role PrivEsc (V7.5, V8.0 < U11, V8.1 < U7)
CVE-2026-59241 Published on October 13, 2026
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.
Weakness Type
Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2026-59241
Want to know whenever a new CVE is published for Siemens Simatic Wincc? stack.watch will email you.
Affected Versions
Siemens SIMATIC WinCC V7.5:- Before * is affected.
- Before V8.0 Update 11 is affected.
- Before V8.1 Update 7 is affected.