References https://sec-consult.com/vulnerability-lab/advisory/reflected-xss-in-siemens-sinema-remote-connect/ https://cert-portal.siemens.com/productcert/html/ssa-484086.html https://cert-portal.siemens.com/productcert/html/ssa-869574.html https://www.nsfocus.net/vulndb/67502 https://www.cnvd.org.cn/patchInfo/show/569091 https://app.opencve.io/cve/?vendor=siemens&product=sinema_remote_connect_server&page=3 https://nvd.nist.gov/vuln/detail/cve-2022-23102 https://www.cvedetails.com/version/1441339/Siemens-Sinema-Remote-Connect-Server-3.1.html https://www.cisa.gov/news-events/ics-advisories/icsa-22-167-17 https://www.cve.org/CVERecord?id=CVE-2016-6204 https://www.cnvd.org.cn/flaw/typeResult?typeId=28&max=20&offset=580 https://www.imeic.edu.cn/xxzx/info/1150/3382.htm
Related VulnerabilitiesPoCCVE-2026-26216: Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks ParameterPoCCVE-2026-40281: Gotenberg <= 8.30.1 - Remote Code ExecutionPoCCVE-2026-86242: Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL FetchPoCCRMEB /api/remote_register 权限绕过漏洞PoCCVE-2025-62593: Ray < 2.52.0 - Remote Code ExecutionPoCoidc-signing-alg-none-supported: OpenID Connect - Unsigned (alg none) ID Token SupportedPoCCVE-2026-1340: Ivanti EPMM < 12.8.0.0 - Remote Code ExecutionPoCCVE-2026-86218: N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code ExecutionPoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_codePoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code ExecutionPoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code ExecutionPoCCVE-2026-41679: Paperclip - Remote Code ExecutionPoCCVE-2026-5562: Provectus kafka-ui <=0.7.2 - Remote Code Execution