CVE-2026-54799

No fix known EPSS <1%CVSS 6.7

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.

Published 2026-07-09 · CVE record · OSV

Products: Siemens CPCI85 Central Processing/Communication, Siemens SICORE Base system