CVE-2026-69109
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.
Risk Assessment
An attacker can read sensitive system files or application data, potentially leading to confidentiality and integrity compromise.
Recommendation
Upgrade Siemens License Server to version V5.3 or later, and restrict network access to the application to trusted hosts only.
Original NVD description (English source)
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.