CVE-2026-69108CWE-732

CVE-2026-69108

Medium · published August 11, 2026

CVSS v3.1
6.0
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to full system compromise.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.2th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-08-11T17:19Z
References (1)
https://cert-portal.siemens.com/productcert/html/ssa-077553.html · [email protected]
EPSS history
Timeline
  • 11 AUG 12:20Z
    A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1)
    cvelistv5