The vulnerability identified as CVE-2026-54801 affects Siemens CPCI85 Central Processing/Communication and SICORE Base system versions before V26.20.0. It stems from insufficient verification of authentication credentials during administrative account modifications through the web API. This weakness can be exploited by an authenticated attacker with existing privileges to escalate their access rights, bypassing intended security controls. The CVSS 3.1 base score is 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Siemens has published the vulnerability but has not yet provided an official fix or mitigation instructions. The vulnerability is not reported to be exploited in the wild.

An authenticated attacker with high privileges can exploit this vulnerability to bypass security controls and gain unauthorized elevated privileges on the affected Siemens CPCI85 Central Processing/Communication and SICORE Base systems. This could lead to full compromise of confidentiality, integrity, and availability of the system. The vulnerability affects administrative account modifications via the web API, potentially allowing privilege escalation.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the web API to trusted administrators only and monitor for suspicious administrative account changes. Avoid granting unnecessary high privileges to users. Follow Siemens advisories for updates.