Opcenter Execution Foundation vulnerabilities

8 known vulnerabilities in Opcenter Execution Foundation from Siemens. 8 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Google Brotli Unchecked Return Value Exploited

  CVE-2026-111497Oct 22, 2026GoogleEPSS 82.6%

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a

• 8.1 High severity

  PHP Stale Internal Request-State Exploited

  CVE-2026-109619Oct 21, 2026PHP GroupEPSS 100%

  PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subse

• 9.8 Critical severity

  PHP Memory Corruption Exploited

  CVE-2026-109618Oct 21, 2026PHP GroupEPSS 100%

  PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The su

• 9.8 Critical severity

  Opcenter Execution Foundation: Heap-based Buffer Overflow

  CVE-2024-49775Dec 16, 2024SiemensEPSS 1.51%

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versio

• 7.5 High severity

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407)…

  CVE-2023-46285Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 7.5 High severity

  Opcenter Execution Foundation: Out-of-bounds Write

  CVE-2023-46284Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 7.5 High severity

  Opcenter Execution Foundation: Buffer Copy without Checking Size of Input

  CVE-2023-46283Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 8.8 High severity

  Opcenter Execution Foundation: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2023-46281Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)