ZDI-26-297
HIGH 8.8
Published
Apr 23, 2026
Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability
Siemens
This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.