A vulnerability classified as problematic has been found in Siemens SINEC INS up to 1.0 SP2 Update 5. This affects an unknown function of the file /api/sftp/uploadFiles. This manipulation causes path traversal: ‘/dir/../filename’.
This vulnerability is tracked as CVE-2026-46747. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
