CVE-2026-50093

Name of the Vulnerable Software and Affected Versions Siveillance Control Pro versions prior to 3.0.12.2173 Siveillance Control Pro versions prior to 4.0.9.2178 Siveillance Control versions prior to 3.0.22.2177 Siveillance Control versions prior to 4.0.11.2177

Description A flaw in the OIS web module enables an attacker to upload arbitrary files to the server. Successful exploitation can grant root access to the host system, potentially leading to a full compromise of the OIS environment. Threat actors have been observed exploiting this issue to upload malicious files and pivot laterally from industrial control networks to expand access across critical infrastructure.

Recommendations Update Siveillance Control Pro to version 3.0.12.2173 or later. Update Siveillance Control Pro to version 4.0.9.2178 or later. Update Siveillance Control to version 3.0.22.2177 or later. Update Siveillance Control to version 4.0.11.2177 or later. Implement runtime segmentation to contain post-compromise movement.