Vulnerabilities of Siemens User Management Component (UMC)

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-25656	A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All…	7.8 High	Feb 10, 2026
CVE-2025-15467	Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…	Not rated	Jan 27, 2026
CVE-2025-40798	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…	7.5 High	Sep 9, 2025
CVE-2025-40797	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…	7.5 High	Sep 9, 2025
CVE-2025-40796	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…	7.5 High	Sep 9, 2025
CVE-2025-40795	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…	9.8 Critical	Sep 9, 2025
CVE-2025-30176	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC…	7.5 High	May 13, 2025
CVE-2025-30175	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC…	7.5 High	May 13, 2025
CVE-2025-30174	A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC…	7.5 High	May 13, 2025