Advisoriesby IbisSiemensCVE-2026-59086
Siemens Simcenter: code execution
Fix: upgrade to V2606 or later (2 fixed versions below)
A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Simcenter Femap Product | < V2606 | V2606 |
| Simcenter Nastran Product | < V2606 | V2606 |
Details and references
- CVSS 4.0
- CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-121