https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T04:13:53.966729+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-58113 fkie_cve-2026-58113 2026-10-01T04:13:53.980602+00:00

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint). This could allow an unauthenticated remote attacker to inject arbitrary JavaScript into the browser of an authenticated user who loads a crafted URL, enabling the attacker to perform actions within the victim's Teamcenter session.

 https://vulnerability.circl.lu/vuln/ghsa-66wm-wchr-375j GHSA-66wm-wchr-375j 2026-10-01T04:13:53.980705+00:00

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint). This could allow an unauthenticated remote attacker to inject arbitrary JavaScript into the browser of an authenticated user who loads a crafted URL, enabling the attacker to perform actions within the victim's Teamcenter session.

 https://vulnerability.circl.lu/vuln/icsa-26-258-07 ICSA-26-258-07 — Siemens Teamcenter 2026-10-01T04:13:53.980747+00:00

A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation may enable the attacker to read data or perform actions within the victim's Teamcenter session.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

 https://vulnerability.circl.lu/vuln/ncsc-2026-0346 NCSC-2026-0346 — Kwetsbaarheden verholpen in Siemens producten 2026-10-01T04:13:53.980792+00:00 NCSC-2026-0346 https://vulnerability.circl.lu/vuln/ssa-157465 SSA-157465 — SSA-157465: Reflected Cross-site scripting Vulnerability in Teamcenter 2026-10-01T04:13:53.980882+00:00

A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation may enable the attacker to read data or perform actions within the victim's Teamcenter session.

Siemens has released new versions for the affected products and recommends to update to the latest versions.