CVE-2026-44411

Published: May 12, 2026Modified: Jun 29, 2026

7.3

Vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Affected (6)

Products: Siemens: Solid Edge Se2026

Siemens

1 product

Solid Edge Se2026

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Siemens Solid Edge Se2026	Before 226.0
Siemens Solid Edge Se2026	Version 226.0
Siemens Solid Edge Se2026	Version 226.0 update_1
Siemens Solid Edge Se2026	Version 226.0 update_2
Siemens Solid Edge Se2026	Version 226.0 update_3
Siemens Solid Edge Se2026	Version 226.0 update_4

Related CWEs

CWE-824

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

References (1)

https://cert-portal.siemens.com/productcert/html/ssa-921111.html

Source: productcert@siemens.com

MitigationVendor Advisory

Timeline

No history available yet.