THREAT OPS › Threat News › Siemens License Server (SLS)
Siemens License Server (SLS)
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-07.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Siemens License Server is affected by multiple vulnerabilities which could allow an attacker to elevate its privileges and read arbitrary files on the system. Siemens has released a new version for Siemens License Server (SLS) and rec
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2026-69108cve
- CVE-2026-69109cve
- https://www.cve.org/CVERecord?id=CVE-2026-69108url
- https://support.sw.siemens.com/product/1586485382/url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Nurl
- https://www.cve.org/CVERecord?id=CVE-2026-69109url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nurl
- https://www.siemens.com/cert/operational-guidelines-industrial-securityurl
- https://www.siemens.com/industrialsecurityurl
- https://www.siemens.com/cert/advisoriesurl
- https://www.siemens.com/productcert/terms-of-useurl
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07
Same event, other sources
- Siemens License Server (SLS)cisa_advisories · 2026-08-13