Vulnerabilities

CVSS

6.0 Medium

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Risk score

48.0

Published

2026-08-11

Status

Awaiting Analysis

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to full system compromise.

Weaknesses

CWE-732

Coverage 1

vulnerability

Siemens License Server (SLS)

Siemens License Server (SLS) versions prior to 5.3 are vulnerable to two separate attacks: a local privilege escalation due to an insecure sudoers policy, allowing an attacker to execute arbitrary commands and plant mali…

CISA Advisories · Aug 13, 2026 Critical

CVE-2026-69108CVE-2026-69109vulnerabilitysudopath traversal

All articles mentioning it

Advisories and references

• cert-portal.siemens.com/productcert/html/ssa-077553.html