PT-2026-7259 · Siemens · Sinec Nms+1

CVE-2026-25656 · Publicado 2026-02-10 · Atualizado 2026-02-25

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to 2.15.2.1 User Management Component (UMC) versions prior to 2.15.2.1

Description The application allows unauthorized modification of a configuration file by a user with limited privileges. This could enable an attacker to load malicious DLLs, potentially resulting in arbitrary code execution with SYSTEM privileges.

Recommendations Update SINEC NMS to version 2.15.2.1 or later. Update User Management Component (UMC) to version 2.15.2.1 or later.

Correção

LPE

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

BDU:2026-05799

CVE-2026-25656

ZDI-26-132

Produtos afetados

Sinec Nms

User Management

Referências · 8

• https://twitter.com/CVEnew/status/2021171944188674285 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-25656 · Aviso do Fabricante
• https://t.me/CVEtracker/44303 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-25656 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-26-132 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-05799 · Nota de Segurança
• https://cert-portal.siemens.com/productcert/html/ssa-311973.html · Aviso do Fabricante
• https://twitter.com/kernyx64/status/2022196625037230178 · Publicação no Twitter