Siemens SINEC NMS contains an authentication bypass vulnerability (CVE-2026-24032) when used with User Management Component (UMC). The vulnerability allows unauthenticated remote attackers to bypass authentication and gain unauthorized access due to insufficient validation of user identity. CVSS score is 7.3 (HIGH). Siemens has released version 4.0 SP3 to address the issue. The vulnerability affects critical manufacturing infrastructure worldwide and was categorized as CWE-347 (Improper Verification of Cryptographic Signature).