> ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability
[DATE: 23/04/2026 05:00]
[LANGUAGE: EN]
This vulnerability allows remote attackers to bypass authentication on affected installations of Siemens SINEC NMS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-24032.