Vulnerability · Published Mar 10, 2026 · Assigned by siemens
CVE-2026-25570
High 7.4
In plain English
A high-severity stack buffer overflow in SICAM SIAPP SDK from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.2%top 94.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SICAM SIAPP SDK | 0 – before V2.1.7 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H