Answer in brief
CVE-2026-34223 records a High severity (CVSS 8.2) vulnerability in CISA ADP Vulnrichment. The current sources do not mark it as known exploited. The current feed maps Siemens/Desigo CC ClickOnce Client V6 (generic), Siemens/Desigo CC ClickOnce Client V7 (generic), Siemens/Desigo CC Installed Client V6 (generic), Siemens/Desigo CC Installed Client V7 (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.2. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Siemens/Desigo CC ClickOnce Client V6 (generic), Siemens/Desigo CC ClickOnce Client V7 (generic), Siemens/Desigo CC Installed Client V6 (generic), Siemens/Desigo CC Installed Client V7 (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Siemens/Desigo CC ClickOnce Client V6generic | >=0 <* | * |
| Siemens/Desigo CC ClickOnce Client V7generic | >=0 <* | * |
| Siemens/Desigo CC Installed Client V6generic | >=0 <* | * |
| Siemens/Desigo CC Installed Client V7generic | >=0 <* | * |
Published upstream
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 14, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 8, 2026
A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versions), Desigo CC Flex Client V7 (All versions), Desigo CC Installed Client V6 (All versions), Desigo CC Installed Client V7 (All versions). The affected application is vulnerable to Client Code Execution (CCE) due to insufficient input validation when handling scripts embedded within user-defined graphics documents. Specifically, when the script within a graphics document is designed or modified by an attacker to include malicious commands. When a user opens a compromised graphics document, the embedded script is executed on the client application instance, allowing an attacker to write arbitrary files to the client's operating system. Successful exploitation requires an attacker to craft a malicious graphics document and entice a user with sufficient privileges to display it. This could lead to compromise of the client operating system and potential lateral movement within the organization.
Quoted source text, attributed separately from HOL analysis.