Answer in brief
CVE-2026-59241 records a High severity (CVSS 8.7) vulnerability in CISA ADP Vulnrichment. The current sources do not mark it as known exploited. The current feed maps Siemens/SIMATIC WinCC V7.5 (generic), Siemens/SIMATIC WinCC V8.0 (generic), Siemens/SIMATIC WinCC V8.1 (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.7. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Siemens/SIMATIC WinCC V7.5 (generic), Siemens/SIMATIC WinCC V8.0 (generic), Siemens/SIMATIC WinCC V8.1 (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Siemens/SIMATIC WinCC V7.5generic | >=0 <* | * |
| Siemens/SIMATIC WinCC V8.0generic | >=0 <V8.0 Update 11 | V8.0 Update 11, V8.0 |
| Siemens/SIMATIC WinCC V8.1generic | >=0 <V8.1 Update 7 | V8.1 Update 7, V8.1 |
Published upstream
Oct 13, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 13, 2026
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.
Quoted source text, attributed separately from HOL analysis.