CVE-2026-50093

Received Received - Intake

Arbitrary File Upload in Siveillance Control Pro

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: siemens-SADP

Description

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-08

Generated

2026-09-28

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-50093

EUVD

EUVD-2026-72658

Affected Vendors & Products

Vendor	Product	Version / Range
siemens	siveillance_control_pro	to 3.0.12.2173 (exc)
siemens	siveillance_control_pro	to 4.0.9.2178 (exc)
siemens	siveillance_control	to 3.0.22.2177 (exc)
siemens	siveillance_control	to 4.0.11.2177 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability affects multiple Siemens Siveillance products (Control Pro V3.0/V4.0 and Control V3.0/V4.0). It exists in the OIS web module, allowing attackers to upload arbitrary files to the server. Exploitation could lead to root access and full compromise of the OIS environment.

Impact Analysis

An attacker could exploit this to gain full control over the affected system, potentially stealing data, installing malware, disrupting operations, or using the system as a foothold for further attacks within the network.

Mitigation Strategies

Immediately update Siveillance Control Pro to version V3.0.12.2173 or later and Siveillance Control to version V3.0.22.2177 or later. Disable the OIS web module if not required and restrict network access to the module. Monitor for unauthorized file uploads or suspicious activity.

Hi! I’m here to help you understand CVE-2026-50093. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70