Status: UPDATED
| Advisory ID: CVE-2026-44411
Key Details
| CVE | CVE-2026-44411 |
| CVSS Score / Version | 7.8 (High) / CVSS v3.1 |
| Updated | 2026-06-29 |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CVSS Prose | attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high. |
| Affected products | Siemens solid_edge_se2026 and Siemens Solid Edge SE2026 |
| Classified as | CWE-824 (Access of Uninitialized Pointer) |
Affected Products, Subsystems & Sectors
| Subsystems | General OT |
| Sectors | Multiple |
What to Know
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (NVD)
What to Do
Monitor Siemens's web page for any future patch releases. See vendor advisory link below.
References