security_identifier

CVE-2026-89207

CVE record for an input validation defect in the web interfaces of Siemens WTV676-HB6035 and WTV776-HB6035 devices that can force them into protection mode.

Current clusters

security1 publisher

Unvalidated backend input can force Siemens WTV676 and WTV776 into protection mode

CVE-2026-89207 lets an unauthenticated remote attacker trip protection mode on Siemens WTV676-HB6035 and WTV776-HB6035 web interfaces. The fixed builds, V3.94 and V4.17, are available now.

Publishers:cisa.gov

Reality

Evidence72
Adoption22
Hype gap0
Incentives45
Confidence68