Reflected Cross-Site Scripting Vulnerability in Siemens Teamcenter

Siemens Teamcenter versions V2412, V2506, V2512, and V2606 are vulnerable to a reflected cross-site scripting (XSS) vulnerability (CVE-2026-58113) located in the authentication redirect flow. The vulnerability arises due to improper neutralization of user-supplied input when reflected into HTML attribute contexts within the /auth/ endpoint. An unauthenticated attacker can craft a malicious URL containing payload-injected parameters to target an authenticated user. When the victim loads this URL, the injected script executes within the victim's active session, potentially allowing the attacker to perform actions on the user's behalf or access sensitive data. Siemens has released patched versions for the affected product families and advises users to upgrade immediately to remediate the flaw.

Impact

Successful exploitation of this vulnerability allows an attacker to execute arbitrary JavaScript within the context of an authenticated user's session. This could lead to session hijacking, unauthorized data exfiltration, or the performance of unauthorized actions within the Teamcenter application. The vulnerability affects critical manufacturing and information technology sectors globally.

Recommendation

Prioritize patching affected Teamcenter installations to the versions specified by the vendor:

• Update Teamcenter V2412 to V2412.0013 or later.
• Update Teamcenter V2506 to V2506.0010 or later.
• Update Teamcenter V2512 to V2512.2607 or later.
• Update Teamcenter V2606 to V2606.2607 or later.
• Apply defense-in-depth strategies to isolate Teamcenter instances from the public internet, as recommended by the vendor.