CVE-2026-50093Disclosure

MEDIUMCVSS 8.9 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

https://cert-portal.siemens.com/productcert/html/ssa-254516.html

Weakness type (CWE)

CWE-434

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
4 mentions across 4 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
Disclosure: 2 classified signals
Peaked 3d ago at 1 mentions (2026-09-09); latest day: 1
4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d

Signal classification3 categories

Disclosure

250.0%

Patch

125.0%

Active Exploitation

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-09	1	Patch1
2026-09-10	1	Disclosure1
2026-09-22	1	Active Exploitation1
2026-09-28	1	Disclosure1

Full discourse4 posts

SHELLCODE@sh3ll_c0d326d
Disclosure
🏭 SIEMENS SIVEILLANCE CVSS 9.0 ROOT RCE! 📹🚪 CISA advisory ICSA-26-265-03: Unauth arbitrary file upload in Open Interface Services overrides facility doors & CCTV. 👉 Analysis: https://sh3llc0d3.com/blog/siemens-siveillance-control-desigo-cc-critical-vulnerabilities-icsa-26-265-03-cve-2026-50093-unauthenticated-arbitrary-file-upload-to-root-rce-in-physical-security-systems/ #sh3llc0d3 #shellcode #OTSecurity #ICS #Siemens
Post summary
The tweet announces a critical CVSS 9.0 vulnerability in Siemens Siveillance, describing it as an unauthenticated arbitrary file upload leading to root RCE, and includes a link to further analysis.
1000091
108 followersView on X
Aviatrix Threat Research Center@aviatrixtrc32d
Active Exploitation
TRC analysis shows attackers exploiting CVE-2026-50093 in Siemens Siveillance Control can upload malicious files for root-level compromise. From industrial control networks, threat actors pivot laterally to expand access across critical infrastructure. Runtime segmentation helps contain post-compromise movement. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/siemens-siveillance-control-cve-2026-50093-file-upload-vulnerability
Post summary
The text reports active exploitation of CVE-2026-50093 in Siemens Siveillance Control via file upload to gain root access, with lateral movement across ICS networks, and recommends runtime segmentation to contain post-compromise activity.
0000046
2.0K followersView on X
Cybersecurity News DE@cybsecuritynews45d
Disclosure
#schwachstellen CVE-2026-50093: Kritische Schwachstelle in Siemens Siveillance Control erlaubt Root-Zugriff #cve202650093 #siemens #siveillancecontrol #siveillancecontrolpro https://cybersecurity-news.de/cve-2026-50093-siveillance-control-root-zugriff
Post summary
The tweet announces a critical vulnerability (CVE-2026-50093) in Siemens Siveillance Control that permits root access, without providing any proof of concept, active exploitation reports, patches, or debunking claims.
0000061
12 followersView on X
Daily CyberSecurity@Daily_CyberSec46d
Patch
Two critical Siemens vulnerabilities (CVE-2026-18963, CVE-2026-50093) allow account takeover and root access. See affected versions and fixes. #Siemens #CyberSecurity #ICS #OTSecurity #CVE #IndustrialEdge #Vulnerability #InfoSec https://securityonline.info/siemens-industrial-edge-vulnerabilities/ https://t.co/Qa7PvpQHrs
Post summary
The tweet announces two critical Siemens vulnerabilities that enable account takeover and root access, and directs readers to see affected versions and fixes.
00000413
12.9K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-50093

Aviatrix Threat Research Center[verified]@aviatrixtrcActive Exploitation

The text reports active exploitation of CVE-2026-50093 in Siemens Siveillance Control via file upload to gain root access, with lateral movement across ICS networks, and recommends runtime segmentation to contain post-compromise activity.

SHELLCODE@sh3ll_c0d3Disclosure

The tweet announces a critical CVSS 9.0 vulnerability in Siemens Siveillance, describing it as an unauthenticated arbitrary file upload leading to root RCE, and includes a link to further analysis.

Cybersecurity News DE@cybsecuritynewsDisclosure

The tweet announces a critical vulnerability (CVE-2026-50093) in Siemens Siveillance Control that permits root access, without providing any proof of concept, active exploitation reports, patches, or debunking claims.

Daily CyberSecurity@Daily_CyberSecPatch

The tweet announces two critical Siemens vulnerabilities that enable account takeover and root access, and directs readers to see affected versions and fixes.