CVE-2026-58114

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC Information Server 2022 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Process Historian 2020 (All versions), SIMATIC Process Historian 2022 (All versions), SIMATIC WinCC Runtime Professional V17 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC Runtime Professional V20 (All versions), SIMATIC WinCC Runtime Professional V21 (All versions), SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected systems do not properly secure their remote user authentication with the deprecated NTLM protocol. This could allow unauthenticated remote attackers, who have achieved a machine in the middle position, to relay NTLM authentication and impersonate a legitimate user. The potential impact depends on the services that are accessible, e.g. a SQL server used by WinCC.

• CWE-1390

• https://cert-portal.siemens.com/productcert/html/ssa-970803.html

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-58102Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a …9.1
• CVE-2026-58106CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-…2
• CVE-2026-58107CodeChecker's massStoreRun processing path performs one-shot…5.5
• CVE-2026-58108The personal access token removal query selects from Persona…1.2
• CVE-2026-5811A vulnerability was identified in SourceCodester Online Food…5.4
• CVE-2026-58113A vulnerability has been identified in Teamcenter V2412 (All…6.1
• CVE-2026-58115A vulnerability has been identified in SIMATIC IoT2050 Advan…10
• CVE-2026-58116LLaMA-Factory through 0.9.5 contains a remote code execution…8.8
• CVE-2026-58118Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-58119Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-5812A security flaw has been discovered in SourceCodester Pharma…5.4
• CVE-2026-58120Rejected reason: This CVE ID has been rejected or withdrawn …