Siemens License Server (SLS) is affected by two vulnerabilities: a local privilege escalation via an insecure sudoers policy (CVE-2026-69108) and a remote path traversal allowing arbitrary file read (CVE-2026-69109). The privilege escalation could lead to full system compromise by enabling root-level command execution. The path traversal exposes arbitrary files to remote attackers without authentication. Siemens recommends updating to V5.1 or later for the sudoers fix and V5.3 or later for the path traversal fix.
CVE-2026-69109
1 post
Siemens License Server (SLS) (CVE-2026-69108, CVE-2026-69109)