CVE-2026-3014

criticalpriority · track · 0EPSS 0.008 · 56 %ileDEEUNL

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.78% (56th) EPSS

CVSS 9.1 · critical

Is it mine?

26 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · ncsc_nl · siemens_psirt

EPSS · scored 2026-10-26

Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server Service.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSiveillance Video V2023 R3siemens_psirt
Update to V23.3 HotfixRev27 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827783/
FixedSiveillance Video V2024 R1siemens_psirt
Update to V24.1 HotfixRev16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109976123/
FixedSiveillance Video V2025siemens_psirt
Update to V25.1 HotfixRev15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109988670/

cvss

Technical severity, 0–10. One row per scoring source.

9.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–critical · 2.5–9.1

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hsecondaryexploitability 2.3 · impact 6

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hsecondary · NCSC-NL NL

v4.06.4mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:Hsecondary · ENISA EU

v4.06.4mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary

v4.02.5lowCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-78USCWE-78USCWE-78US

affected products (26)

Products and version ranges known to be affected.

Milestone Systems XProtect Management Server≤ 0 ≤25.3enisa_euvdEU
Siemens Desigo DXR2≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC3≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC4≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC5.E003≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC5.E24≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC7≤ vers:unknown/*ncsc_nlNL
Siemens LOGO! Soft Comfort≤ vers:unknown/*ncsc_nlNL
Siemens Parasolid V38.0≤ vers:unknown/*ncsc_nlNL
Siemens Parasolid V38.1≤ vers:unknown/*ncsc_nlNL
Siemens RUGGEDCOM APE1808≤ vers:unknown/*ncsc_nlNL
Siemens SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)≤ vers:unknown/*ncsc_nlNL
Siemens Siemens License Server (SLS)≤ vers:unknown/*ncsc_nlNL
Siemens Simcenter Femap≤ vers:unknown/*ncsc_nlNL
Siemens Simcenter Nastran≤ vers:unknown/*ncsc_nlNL
Siemens Siveillance Video V2023 R3≤ vers:unknown/*ncsc_nlNL
Siemens Siveillance Video V2024 R1≤ vers:unknown/*ncsc_nlNL
Siemens Siveillance Video V2025≤ vers:unknown/*ncsc_nlNL
Siemens Solid Edge SE2025≤ vers:unknown/*ncsc_nlNL
Siemens Solid Edge SE2026≤ vers:unknown/*ncsc_nlNL

showing 20 of 26

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2026-0282Kwetsbaarheden verholpen in Siemens productenNL2026-08-11csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Desigo, Parasolid, RUGGEDCOM, SIMATIC, Siveillance en Solid Edge.
SSA-825228SSA-825228: Potential Remote Code Execution in Siveillance Video Management Servers2026-08-11csaf · siemens_psirtDE
Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2026-07-14modified 2026-10-24

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan