PT-2026-7257 · Siemens · Simcenter Femap+1

Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-23720

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simcenter Femap versions prior to 2512 Simcenter Nastran versions prior to 2512

Description The applications contain an out of bounds read issue when processing specially created NDB files. This could potentially allow an attacker to execute code within the current process.

Recommendations Update Simcenter Femap to version 2512 or later. Update Simcenter Nastran to version 2512 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02004

CVE-2026-23720

Affected Products

Simcenter Femap

Simcenter Nastran

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-23720 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-965753.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02004 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23720 · Vendor Advisory
• https://t.me/CVEtracker/44298 · Telegram Post
• https://twitter.com/CVEnew/status/2021171945941893446 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2021275715472081211 · Twitter Post