CVE-2026-30512High· 7.8▾ Twilight

A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score43/ 100 · Moderate

impact 42.9 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Aug 24, 2026

Updated

Oct 14, 2026

CVSS

7.8

Vendor

—

Product

—

CWE

CWE-250

Depth score

43 · Moderate

EPSS

0.17% · p6

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS history

Exploit-prediction probability, daily snapshots since Sep 9.

0.1% → 0.2%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 51 days

Aug 24, 2026Published
Disclosed via NVD
Sep 9, 2026EPSS first tracked
0.1%
Sep 25, 2026EPSS peak
0.1% → 0.2%
Oct 14, 2026Record revised
Last analysed / modified upstream

CWE-250 #nvd

Full technical detail▾

Overview

A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlying Windows operating system. An authenticated low-privileged user can escape the kiosk environment by opening the application manual in the external PDF viewer and abusing the print functionality. Successful exploitation allows execution of arbitrary commands outside the kiosk environment with local administrator privileges.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd

← Back to feed