CVE-2026-50059
published 2026-08-11CVE-2026-50059: A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected…
PriorityP342high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.15%
4.3th percentile
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds write vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | solid_edge_se2025 | < V225.0 Update 15 | V225.0 Update 15 |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2026 | < V226.0 Update 7 | V226.0 Update 7 |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv4.07.3HIGHCVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_oracle8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Siemens Solid Edge prior 225.0 Update 15/226.0 Update 7 DFT File Parser out-of-bounds write
vuldb·2026-09-11·CVSS 7.8
CVE-2026-50059 [HIGH] Siemens Solid Edge prior 225.0 Update 15/226.0 Update 7 DFT File Parser out-of-bounds write
A vulnerability was found in Siemens Solid Edge. It has been declared as problematic. Affected by this issue is some unknown functionality of the component DFT File Parser. Executing a manipulation can lead to out-of-bounds write.
The identification of this vulnerability is CVE-2026-50059. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
GHSA
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
ghsa_unreviewed·2026-08-11
CVE-2026-50059 [HIGH] CWE-787 A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contains an out of bounds write vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
Oracle
Oracle Oracle Commerce Risk Matrix: Content Acquisition System, Workbench, Endeca Application Controller (Oracle Java SE) — CVE-2025-50059
vendor_oracle·2026-01-15·CVSS 8.6
CVE-2025-50059 [HIGH] Oracle Oracle Commerce Risk Matrix: Content Acquisition System, Workbench, Endeca Application Controller (Oracle Java SE) — CVE-2025-50059
Oracle Oracle Commerce Risk Matrix: Content Acquisition System, Workbench, Endeca Application Controller (Oracle Java SE) vulnerability
CVE: CVE-2025-50059
CVSS: 8.6
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2026 (JAN 2026)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-11
Published