VulnerabilityAwaiting Analysis

CVE-2026-69108

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1).

HIGH 8.3EPSS 0.11%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.11%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to full system compromise.

CVSS 4.0: 8.3 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.11% probability · 1th percentile
CISA KEV: Not listed
Weakness: CWE-732
Source: productcert@siemens.com

References

https://cert-portal.siemens.com/productcert/html/ssa-077553.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.