Which versions of Siemens Solid Edge are affected by EUVD-2026-56112?

Siemens Solid Edge (SE2025 and SE2026) contains a use-after-free vulnerability allowing code execution within user process context when opening malicious draft files, directly threatening design…

How to fix or mitigate EUVD-2026-56112?

Within 24 hours, inventory all Siemens Solid Edge SE2025 and SE2026 deployments across your organization, prioritizing systems in engineering and design departments with sensitive file access. Over the next 7 days, download and stage Siemens Solid Edge V225.0 Update 15 (for SE2025) and V226.0 Update 7 (for SE2026) in a test environment to validate compatibility with your CAD workflows, file libraries, and third-party plugins. Complete enterprise rollout of these patched versions within 30 days, beginning with critical design teams; concurrently, restrict parsing and import of draft files (.dft) from external or untrusted sources until all systems are updated.

Siemens Solid Edge EUVD-2026-56112

Q: What is the CVSS score of EUVD-2026-56112?

EUVD-2026-56112 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-50060 HIGH

Use After Free (CWE-416)

2026-08-11 siemens

GHSA-g95c-9q3g-v9jw

Information Disclosure Use After Free Memory Corruption Siemens Solid Edge Se2025 Solid Edge Se2026

7.3

CVSS 4.0 · Vendor: siemens

Severity by source

Vendor (siemens) PRIMARY

7.3 HIGH

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.0 HIGH

Local file-delivery vector and mandatory user interaction drive AV:L and UI:R; AC:H reflects heap-manipulation complexity; no privilege escalation beyond process context so S:U.

3.1 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (siemens).

CVSS VectorVendor: siemens

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Updated

Aug 11, 2026 - 13:51 vuln.today

v3 (cvss_changed)

Analysis Updated

Aug 11, 2026 - 13:51 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 11, 2026 - 13:22 vuln.today

cvss_changed

CVSS changed

Aug 11, 2026 - 13:22 NVD

7.8 (HIGH) 7.3 (HIGH)

Analysis Generated

Aug 11, 2026 - 13:16 vuln.today

CVE Published

Aug 11, 2026 - 12:20 cve.org

HIGH 7.8

DescriptionCVE.org

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.

AnalysisAI

Use-after-free memory corruption in Siemens Solid Edge SE2025 and SE2026 allows code execution in the context of the current user process when a specially crafted DFT (draft) file is parsed. Affected are all SE2025 releases prior to V225.0 Update 15 and all SE2026 releases prior to V226.0 Update 7, as confirmed by Siemens advisory SSA-621657. No public exploit code or active exploitation has been identified at time of analysis, and the local attack vector combined with required user interaction meaningfully constrains real-world exposure.

Technical ContextAI

Solid Edge is a Siemens CAD/CAM/CAE suite widely used in industrial and manufacturing design workflows. The vulnerable component is the DFT file parser - DFT is the Solid Edge proprietary draft/drawing file format. The root cause is CWE-416 (Use After Free): the parser frees a memory object during DFT processing but subsequently dereferences the stale pointer, creating a condition an attacker can exploit to redirect execution. Use-after-free bugs in file parsers typically arise from object lifetime mismanagement across complex parse-state machines. Affected CPE identifiers are cpe:2.3:a:siemens:solid_edge_se2025:*:*:*:*:*:*:*:* (all builds before V225.0 Update 15) and cpe:2.3:a:siemens:solid_edge_se2026:*:*:*:*:*:*:*:* (all builds before V226.0 Update 7). The CVSS 4.0 scope is confined to the vulnerable system (SC:N/SI:N/SA:N), meaning the flaw does not inherently propagate beyond the Solid Edge process itself.

RemediationAI

Vendor-released patches are available: upgrade Solid Edge SE2025 to V225.0 Update 15 or later, and Solid Edge SE2026 to V226.0 Update 7 or later, as detailed in Siemens advisory SSA-621657 at https://cert-portal.siemens.com/productcert/html/ssa-621657.html. Until patching is complete, the most effective compensating control is user-awareness guidance instructing engineers not to open DFT files received from untrusted or unverified external sources - this directly targets the required user-interaction step (UI:P) and eliminates the primary delivery vector. Where operationally feasible, restricting file-association handling so that DFT files from email attachments or downloads do not auto-open in Solid Edge reduces incidental exposure with minimal workflow impact. Network-level controls are not applicable given the local attack vector.