Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Risk score

60.0

Published

2026-08-11

Status

Awaiting Analysis

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.

Weaknesses

CWE-35

Coverage 1

vulnerability

Siemens License Server (SLS)

Siemens License Server (SLS) versions prior to 5.3 are vulnerable to two separate attacks: a local privilege escalation due to an insecure sudoers policy, allowing an attacker to execute arbitrary commands and plant mali…

CISA Advisories · Aug 13, 2026 Critical

CVE-2026-69108CVE-2026-69109vulnerabilitysudopath traversal

All articles mentioning it

Advisories and references

• cert-portal.siemens.com/productcert/html/ssa-077553.html