CVE-2026-33893

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-12 · updated 2026-10-24
Weakness: CWE-798

Description

A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All versions < V2506.0005), Teamcenter V2512 (All versions). The affected application contains hardcoded key which is used for obfuscation stored directly into the application. This could allow an attacker to obtain these keys and misuse them to gain unauthorized access.

Affected products

Siemens Teamcenter: from 2312.0 before 2312.0014; from 2406.0 before 2406.0012; from 2412.0 before 2412.0009; from 2506.0 before 2506.0005 — fixed in 2312.0014, 2406.0012, 2412.0009, 2506.0005

How to fix

Upgrade to a fixed version: Siemens Teamcenter 2312.0014, 2406.0012, 2412.0009, 2506.0005. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-827383.html

Get alerted when CVE-2026-33893 or the next vulnerability affects your stack