Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrative privilege.(ZDI-CAN-28107)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-10 | 2 | Disclosure2 |
| 2026-02-13 | 2 | Disclosure1Patch1 |
CVE-2026-25655 DLL Hijacking in Siemens SINEC NMS Versions Below V4.0 SP2 (ICS) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25655
Post summary
A DLL hijacking vulnerability in Siemens SINEC NMS versions below 4.0 SP2 has been disclosed, with no PoC, exploit, or patch details provided in the text.
⚠️ Vulnerabilidades en productos Siemens ❗ CVE-2026-25656 ❗ CVE-2026-25655 ❗ CVE-2025-40936 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-siemens-3/ https://t.co/Y8ZxJcLVfr
Post summary
A brief announcement of three Siemens product CVEs with a link to additional information, lacking technical details or exploitation context.
12/02/2026 🚨 Multiple Siemens SINEC NMS versions are vulnerable to local privilege escalation (CVE-2026-25655, CVE-2026-25656), allowing low-privileged attackers to execute arbitrary code with elevated privileges. Update to SINEC NMS V4.0 SP2 or later, and UMC to V2.15.2.1 or later immediately. https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-01
Post summary
The advisory announces local privilege escalation vulnerabilities in Siemens SINEC NMS and provides specific patch versions, emphasizing the need for immediate update.
CVE-2026-25655 A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-pr… https://www.cve.org/CVERecord?id=CVE-2026-25655
Post summary
CVE‑2026‑25655 is a disclosure of a configuration‑file modification vulnerability in SINEC NMS, affecting all versions below V4.0 SP2.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | siemens | sinec_nms | - | - | - |
| App | siemens | sinec_nms | 4.0 | - | - |
| App | siemens | sinec_nms | 4.0 | - | - |