CVE-2026-25656General(siemens / sinec_nms)

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch siemens sinec_nms systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)

siemens CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://cert-portal.siemens.com/productcert/html/ssa-311973.html

Weakness type (CWE)

CWE-427

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sinec_nms
user_management_component

Threat summary

Patch or workaround signal is available
6 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
General: 3 classified signals
Disclosure: 2 classified signals
Peaked 3d ago at 2 mentions (2026-02-10); latest day: 1
6 total mentions across 4 days

Affected systems

Vendors

siemens

Products

sinec_nmsuser_management_component

1 version affected across 2 products

Deep dive

Activity timeline6 mentions / 4d

Signal classification3 categories

General

350.0%

Disclosure

233.3%

Patch

116.7%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-10	2	Disclosure1General1
2026-02-11	1	General1
2026-02-13	2	General1Patch1
2026-02-26	1	Disclosure1

Full discourse6 posts

Vulmon Vulnerability Feed@VulmonFeeds240d
Disclosure
CVE-2026-25656 Arbitrary Code Execution in SINEC NMS User Management Component via Configuration Modification https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25656
Post summary
The post announces CVE-2026-25656, an arbitrary code execution flaw in SINEC NMS User Management triggered by configuration changes.
0001039
4.0K followersView on X
CVE@CVEnew240d
General
CVE-2026-25656 A vulnerability has been identified in SINEC NMS (All versions), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper… https://www.cve.org/CVERecord?id=CVE-2026-25656
Post summary
The text announces CVE‑2026‑25656 for SINEC NMS and its User Management Component but offers no additional details on exploitation, patches, or technical specifics.
00010183
56.5K followersView on X
SystemTek - Technology news website@SystemTek_UK224d
Disclosure
Siemens SINEC NMS Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVE-2026-25656) #CVE202625656 #CyberSecurity #PrivilegeEscalationVulnerability #Siemens https://www.systemtek.co.uk/?p=48538 https://t.co/3BLdDy3OLn
Post summary
A new local privilege escalation vulnerability (CVE-2026-25656) in Siemens SINEC NMS has been disclosed, identified as an uncontrolled search path element issue.
0000054
1.8K followersView on X
CERT-PY@CERTpy237d
General
⚠️ Vulnerabilidades en productos Siemens ❗ CVE-2026-25656 ❗ CVE-2026-25655 ❗ CVE-2025-40936 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-siemens-3/ https://t.co/Y8ZxJcLVfr
Post summary
The tweet lists three Siemens product CVEs and directs readers to external links for details, but does not provide technical specifics, PoC, exploit code, or patch information.
00000102
6.6K followersView on X
Kernyx64@kernyx64237d
Patch
12/02/2026 🚨 Multiple Siemens SINEC NMS versions are vulnerable to local privilege escalation (CVE-2026-25655, CVE-2026-25656), allowing low-privileged attackers to execute arbitrary code with elevated privileges. Update to SINEC NMS V4.0 SP2 or later, and UMC to V2.15.2.1 or later immediately. https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-01
Post summary
The advisory discloses local privilege escalation vulnerabilities in Siemens SINEC NMS, specifies patch versions, and urges immediate updates.
0000054
25 followersView on X
RedPacket Security@RedPacketSec239d
General
CVE Alert: CVE-2026-25656 - Siemens - SINEC NMS - https://www.redpacketsecurity.com/cve-alert-cve-2026-25656-siemens-sinec-nms/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-25656 #siemens #sinec-nms
Post summary
The post announces a CVE alert for Siemens SINEC NMS and provides a link to an external resource, but it contains no additional details, proof of concept, or evidence of exploitation.
0000096
3.5K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	siemens	sinec_nms	-	-	-
App	siemens	user_management_component	-	-	-

Explore more

Back to dashboard siemens CVEs sinec_nms vulnerabilities

What researchers are saying

CVE-2026-25656

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-25656, an arbitrary code execution flaw in SINEC NMS User Management triggered by configuration changes.

CVE@CVEnewGeneral

The text announces CVE‑2026‑25656 for SINEC NMS and its User Management Component but offers no additional details on exploitation, patches, or technical specifics.

SystemTek - Technology news website@SystemTek_UKDisclosure

A new local privilege escalation vulnerability (CVE-2026-25656) in Siemens SINEC NMS has been disclosed, identified as an uncontrolled search path element issue.

CERT-PY@CERTpyGeneral

The tweet lists three Siemens product CVEs and directs readers to external links for details, but does not provide technical specifics, PoC, exploit code, or patch information.

Kernyx64@kernyx64Patch

The advisory discloses local privilege escalation vulnerabilities in Siemens SINEC NMS, specifies patch versions, and urges immediate updates.

RedPacket Security@RedPacketSecGeneral

The post announces a CVE alert for Siemens SINEC NMS and provides a link to an external resource, but it contains no additional details, proof of concept, or evidence of exploitation.