Is CVE-2026-25573 actively exploited?

No active exploitation of CVE-2026-25573 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-25573 be exploited remotely?

No. CVE-2026-25573 requires local access to exploit.

What is the CVSS score of CVE-2026-25573?

CVE-2026-25573 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2026-25573

HIGH

CVE-2026-25573

CWE-73Published: March 10, 2026· Updated: Mar 12, 2026

7.8

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:8.8th

Official Description

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise.

NVD Source

Technical Analysis

CVE-2026-25573 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

siemens1 product

sicam siapp sdk

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://cert-portal.siemens.com/productcert/html/ssa-903736.html

News & Research Mentioning CVE-2026-25573

Siemens SICAM SIAPP SDK

CISA Alerts· Mar 17, 2026

View CSAF Summary The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the simulation environment. These vulnerabilities are only exploitable if the API is used improperly or hardening measures are not applied. Siemens has released a new version for SICAM SIAPP SDK and recommends to update to the latest version. The following versions of Siemens SICAM SIAPP SDK are affected: SICAM SIAPP SDK vers:intdot/<2.1.7 CVSS Vendor Equipment Vulnerabilities v3 7.4 Siemens Siemens SICAM SIAPP SDK Out-of-bounds Write, Stack-based Buffer Overflow, Improper Handling of [xlite_meta score:73 src:CISA Alerts xlite_fp:d0869400e5a8a6f1ba6d1c7592635451878e308753a0264e66ba16848216a8d8]