PT-2026-7255 · Siemens · Simcenter Femap+1

Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-23718

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simcenter Femap versions prior to 2512 Simcenter Nastran versions prior to 2512

Description The applications contain an out of bounds read issue when processing specially created NDB files. This could potentially allow an attacker to run code with the permissions of the current process.

Recommendations Update Simcenter Femap to version 2512 or later. Update Simcenter Nastran to version 2512 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02002

CVE-2026-23718

Affected Products

Simcenter Femap

Simcenter Nastran

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-23718 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-965753.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23718 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02002 · Security Note
• https://t.me/CVEtracker/44296 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2021283394395476202 · Twitter Post
• https://twitter.com/CVEnew/status/2021171947695202594 · Twitter Post