Is CVE-2026-58113 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-58113 being exploited in the wild.

How severe is CVE-2026-58113?

Medium severity, with a CVSS score of 6.1, published 8 September 2026.

Which products and versions are affected?

Siemens Teamcenter V2412 < V2412.0013, V2506 < V2506.0010, V2512 < V2512.2607, V2606 < V2606.2607.

Is there a fix for CVE-2026-58113?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-58113 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-58113?

Check whether you run Siemens Teamcenter at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-58113: Siemens Teamcenter reflected cross-site scripting in authentication redirect

Q: Is there a fix for CVE-2026-58113?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-58113 attacked?

It is attacked over the network, in a web application.

Q: Am I affected by CVE-2026-58113?

Check whether you run Siemens Teamcenter at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-58113 · Severity: medium · CVSS 6.1 · Published 2026-09-08

Siemens Teamcenter is a product lifecycle management (PLM) system used to manage product design, engineering, and manufacturing processes across organizations. A reflected cross-site scripting vulnerability in the authentication redirect flow allows an unauthenticated attacker to craft a malicious URL that, when clicked by an authenticated user, injects arbitrary JavaScript code into the user's browser session. An attacker exploiting this could read sensitive data or perform unauthorized actions within the victim's Teamcenter account.

Technologies: Siemens Teamcenter. Vendors: Siemens.

Quick answers

Is CVE-2026-58113 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-58113 being exploited in the wild.
How severe is CVE-2026-58113?: Medium severity, with a CVSS score of 6.1, published 8 September 2026.
Which products and versions are affected?: Siemens Teamcenter V2412 < V2412.0013, V2506 < V2506.0010, V2512 < V2512.2607, V2606 < V2606.2607.
Is there a fix for CVE-2026-58113?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-58113 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-58113?: Check whether you run Siemens Teamcenter at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a reflected cross-site scripting (XSS) vulnerability (CWE-79) in Siemens Teamcenter's authentication redirect flow (/auth/ endpoint). The vulnerability exists because user-supplied input is not properly encoded before being reflected into HTML attribute contexts. The attack requires user interaction (the victim must click a crafted link) but no authentication on the attacker's side. An unauthenticated attacker can inject arbitrary JavaScript that executes in the context of an authenticated user's session, allowing them to read session data, perform actions as the victim, or steal credentials. Siemens has released patched versions for all affected product lines (V2412.0013, V2506.0010, V2512.2607, V2606.2607 and later).

Affected products

Siemens Teamcenter V2412 < V2412.0013, V2506 < V2506.0010, V2512 < V2512.2607, V2606 < V2606.2607

Timeline

2026-09-08: disclosed
2026-09-08: advisory: Siemens SSA-157465 published

References

https://cert-portal.siemens.com/productcert/html/ssa-157465.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.