CVE-2026-25654

Covered in 2 advisories

Radar advisories

2026-04-23 ZDI ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability The vulnerability requires authentication but allows remote privilege escalation in Siemens SINEC NMS.
2026-04-21 CISA Siemens SINEC NMS An authenticated attacker can reset any user's password in SINEC NMS by bypassing authorization checks. The advisory notes deployment in critical…

References