Skip to content
Threat Feed
Subscribe

Product

Opcenter X (< V2604)

2 briefs RSS
critical advisory

Critical JWT Authentication Bypass in Siemens Opcenter X (CVE-2026-56451)

A critical vulnerability, CVE-2026-56451, in Siemens Opcenter X versions prior to V2604 allows unauthenticated remote attackers to forge arbitrary JSON Web Tokens (JWTs) due to improper algorithm validation, leading to full authentication bypass, user impersonation including administrative accounts, and complete unauthorized access to the application.

Opcenter X cve authentication-bypass jwt remote-code-execution critical-vulnerability
3t 1c
high advisory

Siemens Security Updates — July 2026

Roundup of Siemens security advisories published in July 2026.

PoC CPCI85 Central Processing/Communication < V26.20 +27 roundup
5c 2i updated