High SSA-979641 1 CVE

SSA-979641: Implicit Execution of Active Content when Opening Files Vulnerability in SIMATIC WinCC Graphics Designer

Published Nov 10, 2026 · Updated Nov 10, 2026

Vendor: Siemens Product: SIMATIC WinCC V7.5 Product: SIMATIC WinCC V8.0 Product: SIMATIC WinCC V8.1

Summary

Graphics Designer of SIMATIC WinCC before V8.2 contains an implicit active content execution vulnerability upon opening files, which could allow an attacker to cause arbitrary code execution on the device.

Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.

Vulnerabilities 1

High 8.5

CVE-2026-59082

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC Wi…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V8.0 SIMATIC WinCC V8.1 ICS / OT

Nov 10, 2026

Revision history

2026-11-10 #1
Publication Date

References

SSA-979641: Implicit Execution of Active Content when Opening Files Vulnerability in SIMATIC WinCC Graphics Designer - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-979641.html