PT-2026-7254 · Siemens · Simcenter Nastran+1

Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-23717

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simcenter Femap versions prior to 2512 Simcenter Nastran versions prior to 2512

Description The applications contain an out of bounds read issue when processing specially crafted XDB files. This could allow an attacker to execute code within the current process.

Recommendations Update Simcenter Femap to version 2512 or later. Update Simcenter Nastran to version 2512 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02005

CVE-2026-23717

Affected Products

Simcenter Femap

Simcenter Nastran

References · 6

• https://osv.dev/vulnerability/CVE-2026-23717 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02005 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-965753.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23717 · Security Note
• https://t.me/CVEtracker/44295 · Telegram Post
• https://twitter.com/CVEnew/status/2021171948487897300 · Twitter Post