LiveThreat Vulnerability Brief — CVE‑2026‑25655
What It Is — Siemens SINEC NMS contains an uncontrolled search‑path element in its OpenSSL configuration loader, allowing a local attacker who can run low‑privileged code to load a malicious config file and gain SYSTEM‑level privileges. Exploitability — No public exploit or active malware observed, but the vulnerability is trivial to weaponise once low‑privilege code execution is achieved; CVSS 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Products — Siemens SINEC NMS (network‑management software used in industrial and enterprise environments).
TPRM Impact — Compromise of a third‑party network‑management platform can give attackers footholds in OT/IT networks, enabling lateral movement to downstream customers and exposing critical infrastructure managed by the vendor.
Recommended Actions — 1️⃣ Deploy Siemens’ security update (SSA‑311973) without delay. 2️⃣ Verify that the OpenSSL configuration file path is locked down to a trusted location and proper file‑system permissions are enforced. 3️⃣ Conduct a privileged‑account audit on systems running SINEC NMS. 4️⃣ Monitor for anomalous activity from the LOCAL SERVICE account and for unexpected OpenSSL config loads. Source: Zero Day Initiative advisory