PT-2026-56805 · Siemens · Cpci85 Central Processing/Communication+1

Published 2026-07-09 · Updated 2026-07-09 · CVE-2026-54799

NVD

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.

Fix

Weakness Enumeration

CWE-489

Related Identifiers

CVE-2026-54799

Affected Products

Cpci85 Central Processing/Communication

Sicore Base System

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-54799 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-229470.html · Note