CVE-2026-50060

Awaiting Analysis Awaiting Analysis - Queue

Use-After-Free in Solid Edge SE2025 and SE2026

Publication date: 2026-08-11

Last updated on: 2026-08-28

Assigner: siemens-SADP

Description

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-28

Generated

2026-08-31

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-50060

EUVD

EUVD-2026-56112

Affected Vendors & Products

Vendor	Product	Version / Range
siemens	solid_edge_se2025	to 225.0_update_15 (exc)
siemens	solid_edge_se2026	to 226.0_update_7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in Siemens Solid Edge SE2025 and SE2026. It occurs when the software improperly handles memory after it has been freed, allowing specially crafted DFT files to trigger code execution in the current process.

Detection Guidance

This vulnerability involves a use-after-free issue in Solid Edge when parsing DFT files. Detection requires checking installed versions of Solid Edge SE2025 (< V225.0 Update 15) or SE2026 (< V226.0 Update 7). Inspect system for these applications and verify update levels. No direct network detection commands are provided.

Impact Analysis

An attacker could exploit this to run malicious code on your system by tricking you into opening a specially crafted DFT file. This could lead to unauthorized access, data theft, or system compromise depending on user privileges.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially exposing sensitive data processed by Solid Edge applications. Such breaches may violate GDPR (data protection) and HIPAA (healthcare data privacy) by enabling unauthorized access to personal or protected health information.

Mitigation Strategies

Update Solid Edge SE2025 to version V225.0 Update 15 or later and Solid Edge SE2026 to version V226.0 Update 7 or later to address the use-after-free vulnerability in DFT file parsing.

Hi! I’m here to help you understand CVE-2026-50060. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70