CVE-2026-23720 - A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512) · CoreCVE

Back Back to CVE browser

HIGH

A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)

Published Feb 10, 2026

7.3

HIGH

CVSS 4.0

EPSS 0.17%

Description

A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the current process.

Affected products

Vendor Siemens Product Simcenter Femap Default
unknown
Affected
- ≥ 0, < V2512
Vendor Siemens Product Simcenter Nastran Default
unknown
Affected
- ≥ 0, < V2512

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Siemens	Simcenter Femap	unknown	Affected ≥ 0, < V2512
Siemens	Simcenter Nastran	unknown	Affected ≥ 0, < V2512

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://cert-portal.siemens.com/productcert/html/ssa-965753.html
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-6886
Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-965753.html		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-6886		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Feb 10, 2026

Updated Feb 10, 2026

Reserved Jan 15, 2026

Link CVE-2026-23720

CISA Vulnrichment

Updated Feb 10, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-23720

Red Hat

No data

ENISA EUVD

Assigner siemens

Published Feb 10, 2026

Updated Feb 10, 2026

Link EUVD-2026-6886

GitHub

No data