9.8
Critical
CVE-2025-40736 A vulnerability has been identified in SINEC NMS (All versions < V4.0)
Description
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could allow an unauthenticated attacker to reset the superadmin password and gain full control of the application (ZDI-CAN-26569).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SINEC NMS 4.0 | earliest → < 4.0 | 4.0 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SINEC NMS
The 79 CVEs of SINEC NMS →
CVE-2026-25654
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3)
8.8
High
CVE-2026-24032
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC)
7.3
High
CVE-2026-25656
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All…
7.8
High
CVE-2026-25655
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2)
7.8
High