GCVE-110-NCSC-2026-479

Advisory PublishedCVSS 5.4/10

Vulnetix · Advisory published November 11, 2026

Multiple versions of SIMATIC software are vulnerable to NTLM relay attacks allowing unauthenticated remote attackers to impersonate users and potentially impact services such as SQL servers used by WinCC.

Download JSON Look up in the Resolve Platform

Weaknesses (CWE)

CWE-1390Weak AuthenticationCWE-415Double FreeCWE-94Improper Control of Generation of CodeCWE-78Improper Neutralization of Special Elements used in an OS CommandCWE-787Out-of-bounds WriteCWE-1327Binding to an Unrestricted IP AddressCWE-352Cross-Site Request Forgery

Risk Scores

CVSS 3.1

5.4/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected Products

Vendor	Product	Versions	Platforms
Siemens	vers:unknown/*	—	—

Aliases

CVE-2026-106175 CVE-2026-109097 CVE-2026-109830 CVE-2026-111497 CVE-2026-112136 CVE-2026-112137 CVE-2026-58114

References

advisory

Browse GCVE Records

851 records in the GCVE database · Updated November 12, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Look up in the Resolve Platform Download JSON