{"id":"CVE-2026-3014","aliases":["EUVD-2026-43655","GHSA-qf7x-39m3-h7wc"],"status":"published","title":"Remote Code Execution by administrative user on the Management Server","description":"Milestone\nhas released a new version of XProtect® (and several cumulative patch updates)\nwhich fix security vulnerability in Management Server API.\n\n\n\nThe vulnerability\ncauses users with edit permissions to the Management Server to be able to\nexecute arbitrary code in context of the Management Server Service.","severity":{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00782,"percentile":0.56239,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2026-07-14T09:45:22Z","modified":"2026-10-24T21:10:00Z","products":[{"vendor":"milestone systems","product":"xprotect management server"},{"vendor":"siemens","product":"siveillance video v2023 r3"},{"vendor":"siemens","product":"siveillance video v2024 r1"},{"vendor":"siemens","product":"siveillance video v2025"}],"references":[{"url":"https://support.milestonesys.com/article/CVE-2026-3014-potential-remote-code-execution-by-admin-user-on-Management-Server","tags":["permissions-required"]},{"url":"https://doc.milestonesys.com/en-US/bundle/sec1504_latest/page/milestone_security_advisory_CVE-2026-3014_potential_remote_code_execution_by_admin_user_on_Management_Server.html","tags":["vendor-advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-825228.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3014"},{"url":"https://github.com/advisories/GHSA-qf7x-39m3-h7wc"}],"sources":{"cve":[{"id":"CVE-2026-3014","title":"Remote Code Execution by administrative user on the Management Server","description":"Milestone\nhas released a new version of XProtect® (and several cumulative patch updates)\nwhich fix security vulnerability in Management Server API.\n\n\n\nThe vulnerability\ncauses users with edit permissions to the Management Server to be able to\nexecute arbitrary code in context of the Management Server Service.","status":"published","published":"2026-07-14T09:45:22.651Z","modified":"2026-08-11T12:23:37.035Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H","level":"medium","assessor":"cna"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T13:49:09.229322Z"}],"euvd":[{"id":"EUVD-2026-43655","description":"Milestone\nhas released a new version of XProtect® (and several cumulative patch updates)\nwhich fix security vulnerability in Management Server API.\n\n\n\nThe vulnerability\ncauses users with edit permissions to the Management Server to be able to\nexecute arbitrary code in context of the Management Server Service.","status":"published","published":"2026-07-14T09:45:22Z","modified":"2026-08-11T12:23:37Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H","level":"medium"}],"updated_at":"2026-11-02T18:02:00.294626Z"}],"ghsa":[{"id":"GHSA-qf7x-39m3-h7wc","title":"Milestone\nhas released a new version of XProtect® (and several cumulative patch updates)\nwhich...","description":"Milestone\nhas released a new version of XProtect® (and several cumulative patch updates)\nwhich fix security vulnerability in Management Server API. \n\n\n\nThe vulnerability\ncauses users with edit permissions to the Management Server to be able to\nexecute arbitrary code in context of the Management Server Service.","status":"published","published":"2026-07-14T12:31:15Z","modified":"2026-08-11T15:33:07Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:10:17.573081Z"}],"nvd":[{"id":"CVE-2026-3014","description":"Milestone\nhas released a new version of XProtect® (and several cumulative patch updates)\nwhich fix security vulnerability in Management Server API.\n\n\n\nThe vulnerability\ncauses users with edit permissions to the Management Server to be able to\nexecute arbitrary code in context of the Management Server Service.","status":"published","published":"2026-07-14T10:16:32.917Z","modified":"2026-10-24T21:10:00.13Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:29.114188Z"}]}}