Our takeSiemens patched a remote code execution flaw (CVE-2026-3014) in Siveillance Video Management Servers; fixed versions are out. This is video surveillance management — physical security infrastructure at sites of every size. If you run it, update now.Cyber Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:Update Siveillance Video servers to versions beyond 23.3.27 immediately; this is a confirmed remote code execution vulnerability covered in ICSA-26-225-10.
What this means for you — Lean IT orgs:If you run Siemens Siveillance Video for physical security, update it to the latest version right away. Most small teams without this system can ignore this advisory.
What this means for you — MSP:Check client environments for any on-prem Siemens Siveillance Video deployments (V2023 R3 and earlier); push the vendor updates and verify they are applied.
What this means for you — Researcher:Review the CSAF and Siemens advisory for CVE-2026-3014 details on the Siveillance Video RCE; test updated builds in lab environments.