← All Advisories

CVE-2026-59701

Last refreshed2026-10-06

Status: UPDATED  |  Advisory ID: CVE-2026-59701

Key Details

CVECVE-2026-59701
CVSS Score / Version7.8 (High) / CVSS v3.1
Updated2026-08-28
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Proseattack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected productsSiemens Simcenter Femap
Classified asCWE-125 (Out-of-bounds Read)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
SiemensSimcenter Femap
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process. (NVD)

What to Do

Monitor Siemens's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-59701
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-59701