CVE-2026-59086

Awaiting Analysis Awaiting Analysis - Queue

Stack Overflow in Simcenter Nastran

Publication date: 2026-08-11

Last updated on: 2026-08-28

Assigner: siemens-SADP

Description

A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606). The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-28

Generated

2026-08-31

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-59086

EUVD

EUVD-2026-56120

Affected Vendors & Products

Vendor	Product	Version / Range
siemens	simcenter_nastran	to 2606 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack overflow vulnerability in Simcenter Nastran (all versions before V2606). It occurs when a specially crafted string is passed as an argument to one of the application binaries, potentially allowing an attacker to execute arbitrary code in the context of the current process.

Detection Guidance

Detecting this vulnerability requires checking the version of Simcenter Nastran installed on your system. Compare the installed version against V2606 or later. If the version is older, the system is vulnerable. No specific commands are provided in the resources, but you can check the version using the application's built-in version command or by examining installation directories.

Impact Analysis

If a user is tricked into running the affected binary with a malicious string, an attacker could execute arbitrary code on the system. This could lead to unauthorized access, data theft, or system compromise.

Compliance Impact

The vulnerability allows arbitrary code execution in the context of the current process, which could lead to unauthorized access or data breaches. This may impact compliance with GDPR (data protection) and HIPAA (healthcare data security) by potentially exposing sensitive data or violating confidentiality requirements.

Mitigation Strategies

Immediately update Simcenter Nastran to version V2606 or later as recommended by Siemens. Ensure network access to affected devices is restricted and follow Siemens' operational guidelines for industrial security to reduce exposure.

Hi! I’m here to help you understand CVE-2026-59086. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70