CVE-2026-22923

CVSS 7.3 HIGHEPSS 0.1%CWE-121

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.3EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 fev 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application contains a data validation vulnerability that could allow an attacker with local access to interfere with internal data during the PDF export process that could potentially lead to arbitrary code execution.

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Siemens · NX Siemens · NX (Managed Mode)

Referências

https://cert-portal.siemens.com/productcert/html/ssa-535115.html