Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-58114

Quick assessment

Affected
Siemens SIMATIC BATCH V9.1
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在以下产品中发现安全漏洞：SIMATIC BATCH V9.1（所有版本）、SIMATIC Information Server 2020（所有版本）、SIMATIC Information Server 2022（所有版本）、SIMATIC PCS 7 V9.1（所有版本）、SIMATIC Process Historian 2020（所有版本）、SIMATIC Process Historian 2022（所有版本）、SIMATIC WinCC Runtime Professional V17 至 V21（所有

CVSS 7.5 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-58114

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC Information Server 2022 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Process Historian 2020 (All versions), SIMATIC Process Historian 2022 (All versions), SIMATIC WinCC Runtime Professional V17 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC Runtime Professional V20 (All versions), SIMATIC WinCC Runtime Professional V21 (All versions), SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected systems do not properly secure their remote user authentication with the deprecated NTLM protocol. This could allow unauthenticated remote attackers, who have achieved a machine in the middle position, to relay NTLM authentication and impersonate a legitimate user. The potential impact depends on the services that are accessible, e.g. a SQL server used by WinCC.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1390
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Siemens SIMATIC BATCH V9.1 0 ~ * -
Siemens SIMATIC Information Server 2020 0 ~ * -
Siemens SIMATIC Information Server 2022 0 ~ * -
Siemens SIMATIC PCS 7 V9.1 0 ~ * -
Siemens SIMATIC Process Historian 2020 0 ~ * -
Siemens SIMATIC Process Historian 2022 0 ~ * -
Siemens SIMATIC WinCC Runtime Professional V17 0 ~ * -
Siemens SIMATIC WinCC Runtime Professional V18 0 ~ * -
Siemens SIMATIC WinCC Runtime Professional V19 0 ~ * -
Siemens SIMATIC WinCC Runtime Professional V20 0 ~ * -
Siemens SIMATIC WinCC Runtime Professional V21 0 ~ * -
Siemens SIMATIC WinCC V7.5 0 ~ * -
Siemens SIMATIC WinCC V8.0 0 ~ * -
Siemens SIMATIC WinCC V8.1 0 ~ * -

II. Public POCs for CVE-2026-58114

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-58114

请登录查看更多情报信息。

Other References for CVE-2026-58114 (1)

Same Patch Batch · Siemens · 2026-11-10 · 6 CVEs total

CVE-2026-112136 8.8 HIGH Mendix Studio Pro 11 远程代码执行漏洞
CVE-2026-109097 8.2 HIGH ROS# < V2.3.1 消息定义文件代码注入漏洞
CVE-2026-59082 7.8 HIGH SIMATIC WinCC V7.5-8.1 任意代码执行漏洞
CVE-2026-109830 7.3 HIGH meta-iot2050 V01.03.01+ 任意代码执行漏洞
CVE-2026-112137 5.4 MEDIUM Mendix Studio Pro 11 CSRF 漏洞影响 11.15 等版本

IV. Related Vulnerabilities

Same product: SIMATIC BATCH V9.1
Same vendor: Siemens
Same weakness: CWE-1390