The vulnerability identified as CVE-2026-58113 affects multiple versions of Siemens Teamcenter, specifically versions before 2412.0013, 2506.0010, 2512.2607, and 2606.2607. It is a CWE-79 improper neutralization of input during web page generation, commonly known as cross-site scripting (XSS). The issue arises from improper encoding of user-supplied input reflected into HTML attribute contexts within the authentication redirect flow at the /auth/ endpoint. An unauthenticated remote attacker can exploit this by crafting a URL that injects malicious JavaScript, which executes in the context of an authenticated user's browser session, potentially allowing the attacker to perform actions on behalf of the user within Teamcenter.

Successful exploitation allows an unauthenticated attacker to execute arbitrary JavaScript in the browser of an authenticated Teamcenter user. This can lead to unauthorized actions within the victim's session, including potential data manipulation or session hijacking. The vulnerability does not directly impact system availability but compromises confidentiality and integrity within the affected user session.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Until a patch is available, users should exercise caution when clicking on untrusted links that lead to the Teamcenter authentication redirect flow.