CVE-2026-59086
Received Received - Intake

Stack Overflow in Simcenter Nastran

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Siemens AG

Description
A vulnerability has been identified in Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-59086
EUVD
EUVD-2026-56120

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
siemens simcenter_nastran to 2606 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack overflow vulnerability in Simcenter Nastran (all versions before V2606). It occurs when a specially crafted string is passed as an argument to one of the application binaries, potentially allowing an attacker to execute arbitrary code in the context of the current process.

Detection Guidance

Detecting this vulnerability requires checking the version of Simcenter Nastran installed on your system. Compare the installed version against V2606 or later. If the version is older, the system is vulnerable. No specific commands are provided in the resources, but you can check the version using the application's built-in version command or by examining installation directories.

Impact Analysis

If a user is tricked into running the affected binary with a malicious string, an attacker could execute arbitrary code on the system. This could lead to unauthorized access, data theft, or system compromise.

Compliance Impact

The vulnerability allows arbitrary code execution in the context of the current process, which could lead to unauthorized access or data breaches. This may impact compliance with GDPR (data protection) and HIPAA (healthcare data security) by potentially exposing sensitive data or violating confidentiality requirements.

Mitigation Strategies

Immediately update Simcenter Nastran to version V2606 or later as recommended by Siemens. Ensure network access to affected devices is restricted and follow Siemens' operational guidelines for industrial security to reduce exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59086. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart