Siemens License Server (sls) CVEs and Security Vulnerabilities

CVE-2026-69108

Local Privilege Escalation via Insecure Sudoers Policy in Siemens License Server

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to full system compromise.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Siemens

Products

Siemens License Server (sls)

CVE-2026-69109

Path Traversal Vulnerability Allowing Remote File Access in Siemens License Server

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed