CVE-2026-50093CWE-434unrestricted-file-upload

CVE-2026-50093

Critical · published September 8, 2026

CVSS v3.1
9.0
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
8.9 · CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00320 · 23.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-09-08T13:18Z
References (1)
https://cert-portal.siemens.com/productcert/html/ssa-254516.html · [email protected]
EPSS history
Timeline
  • 09 SEP 03:19Z
    EPSS moved — → 0%
    epss
  • 08 SEP 08:11Z
    A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178)…
    cvelistv5