THREAT OPS › Threat News › Siemens Teamcenter
Siemens Teamcenter
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-07.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL.
MITRE ATT&CK techniques
Indicators of compromise
- CVE-2026-58113cve
- https://www.cve.org/CVERecord?id=CVE-2026-58113url
- https://support.sw.siemens.com/product/282219420/url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:Nurl
- https://www.siemens.com/cert/operational-guidelines-industrial-securityurl
- https://www.siemens.com/industrialsecurityurl
- https://www.siemens.com/cert/advisoriesurl
- https://cert-portal.siemens.com/productcert/html/ssa-157465.htmlurl
- https://cert-portal.siemens.com/productcert/csaf/ssa-157465.jsonurl
- https://www.siemens.com/productcert/terms-of-useurl
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-07
Same event, other sources
- Siemens Teamcentercisa_ics · 2026-09-15