# CVE-2026-59082

WinCC file handling flaw allows arbitrary code execution when opening crafted files.

- Page: https://www.vulneraibility.com/cve/CVE-2026-59082
- CVSS: 8.5
- Known exploited: not in CISA KEV as of our last sync
- Weakness: CWE-357
- Published: 2026-11-10

## Affected versions

- Siemens SIMATIC WinCC V7.5: affected < *
- Siemens SIMATIC WinCC V8.0: affected < *
- Siemens SIMATIC WinCC V8.1: affected < *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Remote/ local arbitrary code execution via crafted project/file; attacker can execute code, compromise host, pivot, or disrupt control systems.

## Action

Immediate action required

## Recommendation

Isolate engineering stations, block untrusted files, apply vendor advisory mitigations and patch when available.

## References

- [other] https://cert-portal.siemens.com/productcert/html/ssa-979641.html

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.