highCVE
Siemens Solid Edge Multiple File Parsing Vulnerabilities - Seven CVEs Rated HIGH
Out-of-bounds reads, writes, and use-after-free flaws in PAR, PSM, and DFT file parsers could allow arbitrary code execution
CyberIntel Desk2 min read
Key Takeaways
- Seven CVEs (CVE-2026-50058 through CVE-2026-50064) affect Siemens Solid Edge SE2025 and SE2026.
- Vulnerabilities involve out-of-bounds read/write and use-after-free flaws in PAR, PSM, and DFT file parsers.
- CVSS v3.1 base scores are 7.8 (HIGH) for all seven tracked vulnerabilities.
- Exploitation requires local access and user interaction via specially crafted files.
- Siemens has released updates: SE2025 V225.0 Update 15+ or SE2026 V226.0 Update 7+.
Related Security News
highCVE
CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. CVE-2026-88771 involves improper input validation and CVE-2026-88772 involves improper restriction of operations within the bounds of a memory buffer, both affecting Citrix NetScaler products. The additions trigger remediation requirements under Binding Operational Directive 26-04 for Federal Civilian Executive Branch agencies.
CISA Advisories2 min read
