# CVE-2026-46748: Siemens SINEC INS privilege escalation via cap_dac_override binary

Source: https://junglewise.ai/threats/cve-2026-46748-siemens-sinec-ins-privilege-escalation-via-cap-dac-override  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-09. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2026-46748 · Severity: high · CVSS 8.8 · Published 2026-06-09

Siemens SINEC INS, a tool used to manage network services in industrial environments, contains a security flaw that could allow an attacker to take full control of the system. By exploiting a misconfigured internal component, a user with low-level access can bypass security restrictions to modify any file on the system. This can lead to a complete takeover of the application and the underlying server, potentially disrupting industrial network operations.

Technologies: [Siemens Sinec Ins](https://junglewise.ai/threats/technologies/sinec-ins). Vendors: [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2026-46748 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-46748 being exploited in the wild.

**How severe is CVE-2026-46748?** High severity, with a CVSS score of 8.8, published 9 June 2026.

**Which products and versions are affected?** Siemens Sinec Ins All versions < V1.0 SP2 Update 6.

**Is there a fix for CVE-2026-46748?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-46748 attacked?** It is attacked over the network or with local access, in a network appliance.

**Am I affected by CVE-2026-46748?** Check whether you run Siemens Sinec Ins at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in Siemens SINEC INS where a system binary is incorrectly configured with the 'cap_dac_override' Linux capability. This capability allows a process to bypass all Discretionary Access Control (DAC) file permission checks (read, write, and execute). An authenticated attacker with low privileges can leverage this misconfiguration to perform arbitrary file modifications on the underlying filesystem. This path leads to a full privilege escalation to root. While the CVSS vector indicates a network attack vector (AV:N), the vulnerability is fundamentally an 'Execution with Unnecessary Privileges' (CWE-250) issue. Siemens recommends updating to V1.0 SP2 Update 6 or later to remediate this flaw.

## Affected products

- Siemens SINEC INS All versions < V1.0 SP2 Update 6

## Timeline

- 2026-06-09: advisory: Siemens published SSA-860189
- 2026-06-09: disclosed: CVE-2026-46748 published in NVD

## References

- [https://cert-portal.siemens.com/productcert/html/ssa-860189.html](https://cert-portal.siemens.com/productcert/html/ssa-860189.html)

## Related threats

- [Siemens SINEC INS weak password hashing using hardcoded salt](https://junglewise.ai/threats/cve-2026-46749-siemens-sinec-ins-weak-password-hashing-using-hardcoded-salt)
- [Siemens SINEC INS path traversal in SFTP uploadFiles endpoint](https://junglewise.ai/threats/cve-2026-46747-siemens-sinec-ins-path-traversal-in-sftp-uploadfiles-endpoint)
- [Siemens SINEC INS OS command injection in SFTP upload endpoint](https://junglewise.ai/threats/cve-2026-46746-siemens-sinec-ins-os-command-injection-in-sftp-upload-endpoint)