{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-41125", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "state": "PUBLISHED", "assignerShortName": "siemens", "dateReserved": "2026-04-17T11:25:13.214Z", "datePublished": "2026-05-12T08:21:16.957Z", "dateUpdated": "2026-10-13T09:18:25.426Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2026-10-13T09:18:25.426Z" }, "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions < V3.92), blueplanet gridsave 137 TL3-S (All versions < V3.92), blueplanet gridsave 92.0 TL3-S (All versions < V3.92). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network." } ], "affected": [ { "vendor": "Siemens", "product": "blueplanet 100 NX3 M8", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 100 TL3 GEN2", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 105 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 105 TL3 GEN2", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 110 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 125 NX3 M10", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 125 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 125 TL3 GEN2", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 137 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 150 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 150 TL3 GEN2", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 155 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 155 TL3 GEN2", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 165 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 165 TL3 GEN2", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 25.0 NX3-33.0 NX3", "versions": [ { "status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 3.0 NX3-20.0 NX3", "versions": [ { "status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 3.0-5.0 NX1", "versions": [ { "status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 360 NX3 M6", "versions": [ { "status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 50.0 NX3-60.0 NX3", "versions": [ { "status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 87.0 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 87.0 TL3 GEN2", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 92.0 TL3", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet 92.0 TL3 GEN2", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet gridsave 110 TL3-S", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet gridsave 137 TL3-S", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet gridsave 92.0 TL3-S", "versions": [ { "status": "affected", "version": "0", "lessThan": "V3.92", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet hybrid 10.0 TL3", "versions": [ { "status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" }, { "vendor": "Siemens", "product": "blueplanet hybrid 6.0 NH3-12.0 NH3", "versions": [ { "status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" } ], "metrics": [ { "cvssV3_1": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H", "baseScore": 6, "baseSeverity": "MEDIUM" } }, { "cvssV4_0": { "version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 5.9, "baseSeverity": "MEDIUM" } } ], "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-89", "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "type": "CWE" } ] } ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-545643.html" } ] }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-05-12T12:41:52.446857Z", "id": "CVE-2026-41125", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-12T12:42:01.940Z" } } ] } }