Description
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Solid Edge SE2025 | < V225.0 Update 15 | V225.0 Update 15 |
| Siemens | Solid Edge SE2026 | < V226.0 Update 7 | V226.0 Update 7 |
Advisories 3
- ICSA-26-225-12 Siemens Solid Edge CISA ICS & IT advisories · Aug 13, 2026
- NCSC-2026-0282 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 11, 2026
- SSA-621657 SSA-621657: File Parsing Vulnerabilities in Solid Edge Before Version SE2026 Update 7 Siemens ProductCERT · Aug 11, 2026