This vulnerability (CVE-2026-33893) affects Siemens Teamcenter versions before V2312.0014, V2406.0012, V2412.0009, V2506.0005, and all versions of V2512. The application contains hardcoded keys used for obfuscation embedded directly in the software, classified under CWE-798 (Use of Hard-coded Credentials). Such keys, if extracted by an attacker, could be leveraged to bypass access controls or protections, leading to unauthorized access. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No official patch or remediation guidance has been published by Siemens as of the data provided.

The vulnerability allows an attacker to obtain hardcoded cryptographic keys used for obfuscation, potentially enabling unauthorized access to the affected Teamcenter applications. The confidentiality of sensitive information is at risk, but integrity and availability are not impacted according to the CVSS vector. No known exploits have been reported in the wild, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider restricting access to affected Teamcenter versions and monitor for any unusual activity related to key extraction or unauthorized access attempts. Avoid relying on obfuscation keys embedded in the application for security.