Is CVE-2026-25605 actively exploited?

No active exploitation of CVE-2026-25605 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-25605 be exploited remotely?

No. CVE-2026-25605 requires local access to exploit.

What is the CVSS score of CVE-2026-25605?

CVE-2026-25605 has a CVSS score of 7.1 (HIGH).

HOME VULNERABILITIESCVE-2026-25605

HIGH

CVE-2026-25605

CWE-73Published: March 10, 2026· Updated: Mar 12, 2026

7.1

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:4.6th

Official Description

A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file deletion without properly validating the file path or target. An attacker could delete files or sockets that the affected process has permission to remove, potentially resulting in denial of service or service disruption.

NVD Source

Technical Analysis

CVE-2026-25605 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.1.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected Vendors & Products

siemens1 product

sicam siapp sdk

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://cert-portal.siemens.com/productcert/html/ssa-903736.html

News & Research Mentioning CVE-2026-25605

Siemens SICAM SIAPP SDK

CISA Alerts· Mar 17, 2026

View CSAF Summary The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of service within the SIAPP, corruption of SIAPP data, or exploit the simulation environment. These vulnerabilities are only exploitable if the API is used improperly or hardening measures are not applied. Siemens has released a new version for SICAM SIAPP SDK and recommends to update to the latest version. The following versions of Siemens SICAM SIAPP SDK are affected: SICAM SIAPP SDK vers:intdot/<2.1.7 CVSS Vendor Equipment Vulnerabilities v3 7.4 Siemens Siemens SICAM SIAPP SDK Out-of-bounds Write, Stack-based Buffer Overflow, Improper Handling of [xlite_meta score:73 src:CISA Alerts xlite_fp:d0869400e5a8a6f1ba6d1c7592635451878e308753a0264e66ba16848216a8d8]