Vulnerability · Published Jul 9, 2026 · Assigned by siemens
CVE-2026-54800
Medium 4.8
In plain English
A medium-severity security flaw in CPCI85 Central Processing/Communication from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Official description
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized access and control over critical system functions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | CPCI85 Central Processing/Communication | 0 – before V26.20 |
| Siemens | SICORE Base system | 0 – before V26.20.0 |
Weakness: CWE-1188 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N