Siemens Teamcenter

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-07.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user&#039;s session by crafting a malicious URL. Successful exploitation may enable the attacker to read data or perform actions within the victim&#039;s Teamcenter session. Siemens has released new versions for the affected products and reco…