Is CVE-2026-25571 actively exploited?

No active exploitation of CVE-2026-25571 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-25571 be exploited remotely?

No. CVE-2026-25571 requires local access to exploit.

What is the CVSS score of CVE-2026-25571?

CVE-2026-25571 has a CVSS score of 5.5 (MEDIUM).

HOME VULNERABILITIESCVE-2026-25571

MEDIUM

CVE-2026-25571

CWE-130Published: March 10, 2026· Updated: Mar 13, 2026

5.5

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:2.0th

Official Description

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component does not enforce maximum length checks on certain variables before use. This could allow an attacker to send an oversized input that could trigger a stack overflow crashing the process and potentially causing denial of service.

NVD Source

Technical Analysis

CVE-2026-25571 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Vendors & Products

siemens1 product

sicam siapp sdk

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://cert-portal.siemens.com/productcert/html/ssa-903736.html

News & Research Mentioning CVE-2026-25571

Siemens SICAM SIAPP SDK

CISA Alerts· Mar 17, 2026

View CSAF Summary The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the simulation environment. These vulnerabilities are only exploitable if the API is used improperly or hardening measures are not applied. Siemens has released a new version for SICAM SIAPP SDK and recommends to update to the latest version. The following versions of Siemens SICAM SIAPP SDK are affected: SICAM SIAPP SDK vers:intdot/<2.1.7 CVSS Vendor Equipment Vulnerabilities v3 7.4 Siemens Siemens SICAM SIAPP SDK Out-of-bounds Write, Stack-based Buffer Overflow, Improper Handling of [xlite_meta score:73 src:CISA Alerts xlite_fp:d0869400e5a8a6f1ba6d1c7592635451878e308753a0264e66ba16848216a8d8]