CVE-2026-89207 Denial of service in WTV676-HB6035 Web Interface
An unauthenticated remote attacker can force Siemens WTV devices into protection mode, causing loss of remote web access connectivity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-89207?
CVE-2026-89207 is a medium-severity denial of service vulnerability in Siemens WTV676-HB6035 Web Interface, published on 16 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into protection mode, which results in losing remote connectivity functions (Web Access).
Weakness: CWE-1287
Which versions are affected by CVE-2026-89207?
How do I fix CVE-2026-89207?
No fix has been published for CVE-2026-89207 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-89207 being exploited?
There is no known exploitation of CVE-2026-89207 in the wild and no public exploit code.
Sources
Also known as GHSA-26hj-3mvp-2g64.