What is the CVSS score of CVE-2026-25655?

CVE-2026-25655 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Sinec Nms are affected by CVE-2026-25655?

A HIGH severity vulnerability in SINEC NMS allows low-privileged users to improperly modify critical configuration files, potentially enabling unauthorized system changes, data manipulation, or…

How to fix or mitigate CVE-2026-25655?

Within 24 hours: Identify all SINEC NMS instances in your environment and document their versions and deployment scope; implement strict access controls limiting user privileges to read-only where feasible. Within 7 days: Enable comprehensive audit logging on all SINEC NMS configuration file access and modifications; conduct a review of recent configuration changes for unauthorized alterations. Within 30 days: Upgrade all affected SINEC NMS instances to version V4.0 SP2 or later once available; if upgrade is not immediately feasible, implement network segmentation to restrict access to SINEC NMS systems to authorized administrators only.

Sinec Nms CVE-2026-25655

HIGH

Uncontrolled Search Path Element (CWE-427)

2026-02-10 productcert@siemens.com

Privilege Escalation RCE Sinec Nms

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 10, 2026 - 10:15 nvd

HIGH 7.8

DescriptionCVE.org

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrative privilege.(ZDI-CAN-28107)

AnalysisAI

Arbitrary code execution in Siemens SINEC NMS versions prior to V4.0 SP2 can be achieved when a low-privileged user modifies configuration files to load malicious DLLs, resulting in administrative privilege execution. This local vulnerability affects all current deployments and currently has no available patch. An authenticated attacker with local access can exploit this to gain full system compromise.

Technical ContextAI

Classified as CWE-427 (Uncontrolled Search Path Element). Affects Sinec Nms. A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrative privilege.(ZDI-CAN-28107)