cve 2026 25655 25656

The tag cve 2026 25655 25656 covers two high-severity local privilege-escalation vulnerabilities in Siemens SINEC NMS, identified as CVE-2026-25655 and CVE-2026-25656. These flaws involve uncontrolled search path (DLL hijack) weaknesses, allowing a low-privileged local user to modify configuration data and force the product to load attacker-controlled DLLs. Successful exploitation can lead to arbitrary code execution at elevated or SYSTEM privileges. Siemens ProductCERT has released fixes and recommends immediate updates. Independent trackers and CVE aggregators have confirmed the vendor's findings and scoring. The tag is relevant for IT administrators, security researchers, and enterprise users managing Siemens industrial network management systems.