Which versions of Siemens License Server are affected by EUVD-2026-56126?

Siemens License Server (SLS) versions prior to V5.3 contain an unauthenticated remote file reading vulnerability that allows any networked attacker to read arbitrary files without credentials,…

How to fix or mitigate EUVD-2026-56126?

Within 24 hours, inventory all Siemens License Server instances, document their network connectivity, and implement firewall rules restricting SLS endpoint access to only authorized administrative sources. Over the next 7 days, enable comprehensive access and network logging for all SLS connections, disable SLS service immediately if not operationally critical, and check Siemens support channels for any interim security patches or guidance. Within 30 days, upgrade all SLS instances to version V5.3 or later when released by Siemens, review access logs for unauthorized file access attempts, and deploy network intrusion detection signatures for this vulnerability to identify exploitation.

Siemens License Server EUVD-2026-56126

Q: What is the CVSS score of EUVD-2026-56126?

EUVD-2026-56126 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

| CVE-2026-69109 HIGH

Path Traversal: '.../...//' (CWE-35)

2026-08-11 siemens

GHSA-g4jx-hhxc-5329

Path Traversal Siemens Siemens License Server Sls

8.7

CVSS 4.0 · Vendor: siemens

Severity by source

Vendor (siemens) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Network-exploitable unauthenticated read-only path traversal; scope unchanged, no integrity or availability impact - confidentiality only.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (siemens).

CVSS VectorVendor: siemens

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Aug 11, 2026 - 13:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 11, 2026 - 13:22 vuln.today

cvss_changed

CVSS changed

Aug 11, 2026 - 13:22 NVD

7.5 (HIGH) 8.7 (HIGH)

Analysis Generated

Aug 11, 2026 - 13:10 vuln.today

CVE Published

Aug 11, 2026 - 12:20 cve.org

HIGH 7.5

DescriptionCVE.org

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.

AnalysisAI

Unauthenticated arbitrary file read in Siemens License Server (SLS) versions prior to V5.3 allows remote attackers to traverse the filesystem and access sensitive files without any credentials. The root cause is missing sanitization of user-supplied path input (CWE-35), and the CVSS 4.0 score of 8.7 reflects network-exploitable access with no authentication or user interaction required and high confidentiality impact. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the attack complexity is low and the attack surface is any network-reachable SLS instance.

Technical ContextAI

CWE-35 (Path Traversal) describes a failure to neutralize special path elements such as '../' sequences before using user-controlled input to construct a filesystem path. The affected product, identified by CPE cpe:2.3:a:siemens:siemens_license_server_(sls):*:*:*:*:*:*:*:*, is Siemens' software licensing management server - a component that manages and enforces license tokens for Siemens industrial and engineering software suites. Because license servers typically run as privileged service accounts and may store configuration, certificate, and credential files, a successful path traversal can expose highly sensitive material beyond ordinary application data.

RemediationAI

The primary fix is to upgrade Siemens License Server (SLS) to version V5.3 or later, as confirmed by Siemens advisory SSA-077553 (https://cert-portal.siemens.com/productcert/html/ssa-077553.html). Consult the advisory for download links and installation guidance specific to your Siemens software ecosystem. If immediate patching is not feasible, restrict network access to the SLS service using firewall rules or host-based controls so that only trusted engineering workstations and license clients can reach the server's listening port - this removes the 'AV:N' exploitability condition and reduces risk to local or adjacent-network attackers only. Be aware that firewall-based controls do not remediate the vulnerability and must be replaced with the patch as soon as operationally possible. No additional workarounds are documented in the available data.