Vulnerabilities

CVSS

9.1 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Risk score

72.8

Published

2026-07-14

Status

Awaiting Analysis

Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server Service.

Weaknesses

CWE-78

Coverage 1

vulnerability

Siemens Siveillance Video

Siemens has released security advisories addressing a Remote Code Execution (RCE) vulnerability in its Siveillance Video Management Servers. Versions V2023 R3 through V2025 are affected, allowing users with edit permissi…

CISA Advisories · Aug 13, 2026 High

CVE-2026-3014rcecve-2026-3014industrial control systems

All articles mentioning it

Advisories and references

• doc.milestonesys.com/en-US/bundle/sec1504_latest/page/milestone_secu...
• support.milestonesys.com/article/CVE-2026-3014-potential-remote-code...
• cert-portal.siemens.com/productcert/html/ssa-825228.html