High severity · published Jul 9, 2026
CVE-2026-54801
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0)
7.2
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains insufficient validation of authentication credentials when processing administrative account modifications through the web API. This could allow an authenticated attacker to bypass security controls and gain unauthorized elevated privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
CPCI85 Central Processing/Communication · Siemens
before V26.20 · source: vendor
SB
SICORE Base system · Siemens
before V26.20.0 · source: vendor
In the news
VulnerabilityHigh
Siemens SICAM 8
View CSAF
Summary
Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 - SICAM EGS Device firmware - CPCI85 - SICAM S8000 - SICORE Siemens has released new versions for the affected products and recommends to update to the latest versions.
The following versions of Siemens SICAM 8 are affected:
CPCI85 Central Processing/Communication vers:intdot/<26.20 (CVE-2026-54798, CVE-2026-54799, CVE-2026-54800, CVE-2026-54801)
SICORE Base system vers:intdot/<26.20.0 (CVE-2026-54798, CVE-2026-54799, CVE-2026-54800, CVE-2026-54801)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.2
Siemens
Siemens SICAM 8
Active Debug Code, Initialization of a Resource with an Insecure Default, Unverified Password Change
Background
Critical Infrastructure Sectors: Critical Manufacturing, Energy
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Germany
Vulnerabilities
Expand All +
CVE-2026-54798
The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.
View CVE Details
Affected Products
Siemens SICAM 8
Vendor: Siemens
Product Version: CPCI85 Central Processing/C...
Jul 16, 2026·CISA Advisories
Affected product
CC
CPCI85 Central Processing/Communication
Siemens
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-54801
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-54801
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-229470.html
More from CPCI85 Central Processing/Communication
9.0
CVE-2024-3596
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
7.5
CVE-2026-27664
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0)
6.7
CVE-2026-54799
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0)
6.5
CVE-2026-54798
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0)
6.5
CVE-2026-27663
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.10)