VULNERABILITY INTELLIGENCE
CVE-2026-27662
CVSS score7.7 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-05-12
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Description
Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.
Weakness classification
- productcert@siemens.com: CWE-1188