ZDI-26-132
HIGH 7.8
Published
Feb 25, 2026
Siemens SINEC NMS Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Siemens
A privilege escalation vulnerability exists in Siemens SINEC NMS that allows local attackers with low-level code execution capabilities to elevate their access permissions on affected systems. This high-severity flaw (CVSS 7.8) could enable an attacker to gain administrative control and compromise critical industrial network management infrastructure. Security teams should prioritize patching Siemens SINEC NMS installations and implement strict access controls to limit who can execute code on these systems.