Search
Find a vulnerability
Search criteria
2 vulnerabilities found for Teamcenter V2606 by Siemens
CVE-2026-111497 (GCVE-0-2026-111497)
Vulnerability from cvelistv5 – Published: 2026-10-22 13:35 – Updated: 2026-11-10 12:50
VLAI
EPSS
VEX
Title
Out-of-Bounds Write in Google Brotli Decoder
Summary
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Severity
SSVC
Exploitation: active
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-23 00:00 UTC
Assigner
Google
CNA
References
24 references
Impacted products
76 products
| Vendor | Product | Version | |
|---|---|---|---|
| Brotli |
Affected:
1.0.3 , < 1.0.10
(semver)
Affected: 1.1.0 , < 1.1.1 (semver) Affected: 1.2.0 , < 1.2.1 (semver) |
||
| Siemens | Calibre |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Calibre ICE |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Capital |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Cloud Connector Configurator |
Affected:
0 , < V1.24.3
(custom)
|
|
| Siemens | Common Configurator (CC on IEM) |
Affected:
0 , < *
(custom)
|
|
| Siemens | Common Configurator on Device (CC on Edge) |
Affected:
0 , < *
(custom)
|
|
| Siemens | COMOS Walkinside |
Affected:
0 , < *
(custom)
|
|
| Siemens | Data Flow Monitoring |
Affected:
0 , < V3.0.18
(custom)
|
|
| Siemens | Databus Configurator |
Affected:
0 , < V4.0.1
(custom)
|
|
| Siemens | DataXess Configurator |
Affected:
0 , < V1.5.7
(custom)
|
|
| Siemens | Designcenter X Essentials |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Desigo CC family V8 |
Affected:
0 , < *
(custom)
|
|
| Siemens | Desigo CC family V9 |
Affected:
0 , < *
(custom)
|
|
| Siemens | Edge OPC UA Server Configurator |
Affected:
0 , < V2.3.10
(custom)
|
|
| Siemens | Flow Creator Configurator |
Affected:
0 , < V1.15.1
(custom)
|
|
| Siemens | gDAP (gPROMS Digital Application Platform) |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Gridscale X DSA |
Affected:
V5.3 , < V5.4
(custom)
|
|
| Siemens | Gridscale X PSS®E |
Affected:
0 , < V36.8.0
(custom)
|
|
| Siemens | Heliox Dual Port 60kW |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Heliox Flex Pro |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | HyperLynx |
Affected:
0 , < *
(custom)
|
|
| Siemens | Industrial Edge Hub |
Affected:
0 , < *
(custom)
|
|
| Siemens | Industrial Edge Management Cloud |
Affected:
0 , < *
(custom)
|
|
| Siemens | Innexis Architecture Native Acceleration 2026 |
Affected:
0 , < *
(custom)
|
|
| Siemens | Insights Hub |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Connect Electronics |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Connect MOM |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Execution Core |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Execution Discrete |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Execution Foundation |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Execution Pharma |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Execution Process |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Intelligence |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Intra Plant Logistics |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter Quality |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter RDnL |
Affected:
0 , < *
(custom)
|
|
| Siemens | Opcenter X |
Affected:
0 , < *
(custom)
|
|
| Siemens | PADS Pro Essentials |
Affected:
0 , < *
(custom)
|
|
| Siemens | PADS Pro Student Edition |
Affected:
0 , < *
(custom)
|
|
| Siemens | PADS Professional |
Affected:
0 , < *
(custom)
|
|
| Siemens | Pathway to Learning Engineering |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | PAVE360 Automotive 2026 |
Affected:
0 , < *
(custom)
|
|
| Siemens | Polarion |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Process Preparation X |
Affected:
0 , < *
(custom)
|
|
| Siemens | Project Server Web Administration Tool |
Affected:
0 , < *
(custom)
|
|
| Siemens | SICHARGE FLEX |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | SICHARGE UC |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Sifinity Go |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Sifinity Setup |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC BRAUMAT |
Affected:
V8.2 Update 1 , < V8.2 Update 5
(custom)
|
|
| Siemens | SIMATIC Profiling Tool |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC SISTAR |
Affected:
V8.2 Update 1 , < V8.2 Update 5
(custom)
|
|
| Siemens | SIMATIC WinCC Companion |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC WinCC OA V3.20 |
Affected:
0 , < V3.20 P17.1
(custom)
|
|
| Siemens | SIMATIC WinCC OA V3.21 |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC WinCC Runtime Professional |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC WinCC Unified for Industrial Edge |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC WinCC Unified PC Runtime |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC WinCC Unified SIQENCE |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC WinCC V7/V8 |
Affected:
0 , < *
(custom)
|
|
| Siemens | Simcenter Executable Digital Twin |
Affected:
0 , < *
(custom)
|
|
| Siemens | Simcenter Studio |
Affected:
0 , < *
(custom)
|
|
| Siemens | Solid Edge |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Teamcenter Share |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Teamcenter V2412 |
Affected:
0 , < *
(custom)
|
|
| Siemens | Teamcenter V2506 |
Affected:
0 , < *
(custom)
|
|
| Siemens | Teamcenter V2512 |
Affected:
0 , < *
(custom)
|
|
| Siemens | Teamcenter V2606 |
Affected:
0 , < *
(custom)
|
|
| Siemens | TIA Administrator |
Affected:
0 , < *
(custom)
|
|
| Siemens | User Management Component (UMC) |
Affected:
0 , < *
(custom)
|
|
| Siemens | VersiCharge AC Series |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | VersiCloud |
Unaffected:
0 , < *
(custom)
|
|
| Siemens | Xpedition Designer |
Affected:
0 , < *
(custom)
|
|
| Siemens | Xpedition Enterprise |
Affected:
0 , < *
(custom)
|
|
| Siemens | RUGGEDCOM APE1808 |
Affected:
0 , < *
(custom)
|
Date Public
2026-02-27 07:50
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111497",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-23T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T03:55:48.896Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"third-party-advisory"
],
"url": "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/"
},
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-11-03T21:05:46.791Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://github.com/advisories/GHSA-9v8h-qqgm-4m35"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/10/23/25"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/10/24/6"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/10/26/12"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/10/26/13"
},
{
"url": "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497"
},
{
"url": "https://broccoli2shell.com"
},
{
"url": "https://github.com/dotnet/announcements/issues/494"
},
{
"url": "https://github.com/google/brotli/releases/tag/v1.2.1"
},
{
"url": "https://github.com/google/brotli/releases/tag/v1.1.1"
},
{
"url": "https://github.com/google/brotli/releases/tag/v1.0.10"
},
{
"url": "https://patchtheplanet.org/brotli"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/10/26/16"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/11/03/2"
}
],
"title": "CVE Program Container",
"x_generator": {
"engine": "ADPogram 0.0.1"
}
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "Calibre",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Calibre ICE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Capital",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cloud Connector Configurator",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.24.3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Common Configurator\u00a0(CC on IEM)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Common Configurator on Device\u00a0(CC on Edge)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "COMOS Walkinside",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Data Flow Monitoring",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.0.18",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Databus Configurator",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.0.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "DataXess Configurator",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.5.7",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Designcenter X Essentials",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Desigo CC family V8",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Desigo CC family V9",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Edge OPC UA Server Configurator",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.3.10",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Flow Creator Configurator",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V1.15.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "gDAP (gPROMS Digital Application Platform)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Gridscale X DSA",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.4",
"status": "affected",
"version": "V5.3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Gridscale X PSS\u00aeE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V36.8.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Heliox Dual Port 60kW",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Heliox Flex Pro",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "HyperLynx",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Industrial Edge Hub",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Industrial Edge Management Cloud",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Innexis Architecture Native Acceleration 2026",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Insights Hub",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Connect Electronics",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Connect MOM",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Execution Core",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Execution Discrete",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Execution Foundation",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Execution Pharma",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Execution Process",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Intelligence",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Intra Plant Logistics",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter Quality",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter RDnL",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Opcenter X",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "PADS Pro Essentials",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "PADS Pro Student Edition",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "PADS Professional",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Pathway to Learning Engineering",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "PAVE360 Automotive 2026",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Polarion",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Process Preparation X",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Project Server Web Administration Tool",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SICHARGE FLEX",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SICHARGE UC",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Sifinity Go",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Sifinity Setup",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC BRAUMAT",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V8.2 Update 5",
"status": "affected",
"version": "V8.2 Update 1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC Profiling Tool",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC SISTAR",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V8.2 Update 5",
"status": "affected",
"version": "V8.2 Update 1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC WinCC Companion",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC WinCC OA V3.20",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.20 P17.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC WinCC OA V3.21",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC WinCC Runtime Professional",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC WinCC Unified for Industrial Edge",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC WinCC Unified PC Runtime",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC WinCC Unified SIQENCE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC WinCC V7/V8",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Simcenter Executable Digital Twin",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Simcenter Studio",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Solid Edge",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Teamcenter Share",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Teamcenter V2412",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Teamcenter V2506",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Teamcenter V2512",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Teamcenter V2606",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "TIA Administrator",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "User Management Component (UMC)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "VersiCharge AC Series",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "VersiCloud",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Xpedition Designer",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Xpedition Enterprise",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM APE1808",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T12:50:00.309Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-898633.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-443410.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-045512.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-678870.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-242944.html"
}
],
"x_adpType": "supplier"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "github.com/google/brotli",
"product": "Brotli",
"repo": "https://github.com/google/brotli",
"vendor": "Google",
"versions": [
{
"lessThan": "1.0.10",
"status": "affected",
"version": "1.0.3",
"versionType": "semver"
},
{
"lessThan": "1.1.1",
"status": "affected",
"version": "1.1.0",
"versionType": "semver"
},
{
"lessThan": "1.2.1",
"status": "affected",
"version": "1.2.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "OpenAI Codex Security - Khai Tran and Sylvie Mayer"
}
],
"datePublic": "2026-02-27T07:50:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA buffer overflow vulnerability in the Brotli decoder (\u003ccode\u003ec/dec/decode.c\u003c/code\u003e) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\u003cbr\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.\u003cspan\u003e\u003c/span\u003e\u003c/p\u003e"
}
],
"value": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-252",
"description": "CWE-252 Unchecked Return Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T14:58:42.704Z",
"orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"shortName": "Google"
},
"references": [
{
"tags": [
"patch"
],
"url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high"
},
{
"tags": [
"release-notes",
"third-party-advisory"
],
"url": "https://github.com/andybalholm/brotli/releases/tag/v1.2.7"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
}
],
"value": "Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Out-of-Bounds Write in Google Brotli Decoder",
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"assignerShortName": "Google",
"cveId": "CVE-2026-111497",
"datePublished": "2026-10-22T13:35:41.975Z",
"dateReserved": "2026-10-16T09:58:17.790Z",
"dateUpdated": "2026-11-10T12:50:00.309Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-58113 (GCVE-0-2026-58113)
Vulnerability from cvelistv5 – Published: 2026-09-08 08:11 – Updated: 2026-09-09 15:25
VLAI
EPSS
VEX
Summary
A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint).
This could allow an unauthenticated remote attacker to inject arbitrary JavaScript into the browser of an authenticated user who loads a crafted URL, enabling the attacker to perform actions within the victim's Teamcenter session.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:25 UTC
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
siemens
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Siemens | Teamcenter V2412 |
Affected:
0 , < V2412.0013
(custom)
|
|
| Siemens | Teamcenter V2506 |
Affected:
0 , < V2506.0010
(custom)
|
|
| Siemens | Teamcenter V2512 |
Affected:
0 , < V2512.2607
(custom)
|
|
| Siemens | Teamcenter V2606 |
Affected:
0 , < V2606.2607
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58113",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:25:24.743406Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T15:25:34.439Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Teamcenter V2412",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2412.0013",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Teamcenter V2506",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2506.0010",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Teamcenter V2512",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2512.2607",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Teamcenter V2606",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2606.2607",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in Teamcenter V2412 (All versions \u003c V2412.0013), Teamcenter V2506 (All versions \u003c V2506.0010), Teamcenter V2512 (All versions \u003c V2512.2607), Teamcenter V2606 (All versions \u003c V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint).\r\nThis could allow an unauthenticated remote attacker to inject arbitrary JavaScript into the browser of an authenticated user who loads a crafted URL, enabling the attacker to perform actions within the victim\u0027s Teamcenter session."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
},
{
"cvssV4_0": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-08T08:11:21.609Z",
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-157465.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"assignerShortName": "siemens",
"cveId": "CVE-2026-58113",
"datePublished": "2026-09-08T08:11:21.609Z",
"dateReserved": "2026-06-29T11:49:12.097Z",
"dateUpdated": "2026-09-09T15:25:34.439Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}