SSA-921111: Two File Parsing Vulnerabilities in Solid Edge Before Version SE226 Update 5
view advisory published 2026-05-12
Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid Edge SE2026 and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44412US | — | — | ||
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing spec… | ||||
| CVE-2026-44411US | — | — | ||
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is vulnerable to uninitialized pointer access while parsing spec… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- FixedSolid Edge
Update to V226.0 Update 5 or later version
https://support.sw.siemens.com/product/246738425/ - FixedSolid Edge
Update to V226.0 Update 5 or later version
https://support.sw.siemens.com/product/246738425/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan