CVE-2026-54798

MediumCVSS 6.5

Published: 09/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Summary

A vulnerability in CPCI85 Central Processing/Communication and SICORE Base systems (versions before V26.20/V26.20.0) allows an authenticated attacker to exploit a debugging interface accessible via HTTP to crash the web process, causing denial of service (DoS).

Risk Assessment

The risk involves potential disruption of critical control and communication systems, which may lead to downtime in industrial infrastructure.

Recommendation

Immediately update CPCI85 to version V26.20 or later and SICORE Base to version V26.20.0 or later, and restrict access to HTTP interfaces for unauthorized users.

Other vulnerabilities in CPCI85 Central Processing/Communication, SICORE Base

CVE-2026-54801High
A vulnerability in CPCI85 Central Processing/Communication and SICORE Base systems (versions before V26.20/V26.20.0) is caused by insufficient validation of authentication credentials during administrative account modifications via the web API. This allows an authenticated attacker to bypass security controls and gain unauthorized elevated privileges.

Original NVD description (English source)

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.