Simcenter Nastran CVE-2026-59086

Exploitation requires the ability to control or influence string arguments passed to one or more Simcenter Nastran application binaries at the time of execution - achievable through direct local shell access, through a shared automated workflow that processes external job or configuration files, or by convincing a local user to invoke a binary with attacker-supplied arguments. The CVSS 4.0 vector AV:L confirms the attacker must have local execution context on the host; network-only access does not satisfy the attack conditions. UI:P (passive user interaction) indicates a user or process must actually invoke the binary. AC:H limits reliable exploitation: successful code execution likely requires knowledge of the target system's memory layout to overcome stack canaries and ASLR. No elevated privileges are required to invoke the binary itself (PR:N), but physical or authenticated remote shell access to the host is a hard prerequisite. Default installations where Nastran is run only by trusted analysts on isolated engineering workstations present minimal exploitation surface.

The CVSS 4.0 score of 7.3 with a local attack vector (AV:L), high attack complexity (AC:H), and required user interaction (UI:P) collectively constrain real-world exploitability well below what the high confidentiality, integrity, and availability impact ratings might initially suggest. No EPSS score was provided in the input data, and this vulnerability does not appear in the CISA KEV catalog, indicating no confirmed active exploitation campaign. The absence of known public proof-of-concept code further reduces immediate exploitation urgency. Even a mid-sized industrial engineering IT team in zabrze operating Simcenter Nastran within automated batch-processing pipelines should treat this as a meaningful priority if external parties can influence command-line arguments supplied to the application - but for isolated, analyst-operated workstations the practical attack surface remains narrow. The AC:H rating suggests reliable exploitation requires precise understanding of the target's memory layout to defeat modern mitigations such as ASLR and stack canaries, raising the bar beyond opportunistic exploitation. The primary threat model is a malicious or compromised CAE job script, configuration file, or workflow integration that passes attacker-controlled strings to the vulnerable binary.

A threat actor with local host access, or one able to inject a malicious job script into an automated simulation pipeline, crafts an oversized string argument targeting the fixed stack buffer in a Simcenter Nastran binary. When a user or scheduled task invokes the binary with the crafted input, the stack is overwritten and control flow is redirected, achieving code execution as the invoking user. No public proof-of-concept has been identified, but CWE-121 exploitation techniques are well-documented and the barrier is primarily the AC:H complexity of defeating memory-layout randomization on the specific host.