VULNERABILITY INTELLIGENCE
CVE-2026-56451
CVSS score10 CRITICAL
EPSS probability0.50%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.
Weakness classification
- productcert@siemens.com: CWE-347