Solid Edge SE2026 EUVD-2026-29436

User must open a specially crafted PAR (Parasolid) file using Siemens Solid Edge SE2026 versions prior to V226.0 Update 5. The attack requires user interaction (UI:P in CVSS vector)-victim must actively open the malicious file through Solid Edge, which is typical CAD workflow behavior but provides detection opportunity. High attack complexity (AC:H) indicates exploitation likely requires advanced techniques such as bypassing modern exploit mitigations (DEP, ASLR, stack canaries) or precise heap/stack manipulation, limiting attacker pool to sophisticated actors. No special Solid Edge feature or non-default configuration required-vulnerability exists in core PAR file parsing functionality present in all installations. Exploitation is limited to local attack vector (AV:L), meaning attacker cannot trigger remotely but must deliver file to target system via social engineering, compromised file shares, or supply chain insertion.

CVSS 7.3 (High) reflects local attack vector with high complexity and required user interaction, but full system impact (VC:H/VI:H/VA:H). Real-world risk is moderate to high in targeted environments: while the attack requires social engineering (delivering and opening a malicious PAR file), CAD users routinely open files from partners, suppliers, or public repositories, creating realistic delivery paths. The high attack complexity (AC:H) may indicate exploitation requires specific timing, memory layout conditions, or DEP/ASLR bypass techniques. No EPSS score or KEV status provided, but absence from KEV suggests no confirmed widespread exploitation. The vulnerability targets a niche but security-critical sector-manufacturing and defense contractors using Solid Edge-where successful exploitation could lead to intellectual property theft or supply chain compromise. SSVC factors: exploitation requires user interaction (not automatable), technical impact is total system compromise within user context, but no confirmed active exploitation reduces immediate urgency compared to remotely exploitable flaws. Priority depends on organizational exposure to untrusted PAR files and value of systems running Solid Edge.

An attacker crafts a malicious PAR file with carefully structured geometry data designed to overflow stack buffers in Solid Edge's Parasolid parser. The weaponized file is delivered via email, file sharing services, or compromised CAD model repositories, disguised as a legitimate engineering model. When a Solid Edge user opens the file (double-click or File > Open), the parser processes the malformed data, triggering the stack overflow. The attacker's shellcode overwrites return addresses, redirecting execution to embedded payload that runs with the user's privileges, potentially installing backdoors, exfiltrating CAD designs, or pivoting to networked systems.