CVE-2026-50060
published 2026-08-11CVE-2026-50060: A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected…
PriorityP343high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.15%
4.3th percentile
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | solid_edge_se2025 | < V225.0 Update 15 | V225.0 Update 15 |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2025 | — | — |
| siemens | solid_edge_se2026 | < V226.0 Update 7 | V226.0 Update 7 |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
| siemens | solid_edge_se2026 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv4.07.3HIGHCVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Siemens Solid Edge DFT file use after free
vuldb·2026-09-11·CVSS 7.8
CVE-2026-50060 [HIGH] Siemens Solid Edge DFT file use after free
A vulnerability was found in Siemens Solid Edge. It has been rated as critical. This affects an unknown part of the component DFT file Handler. The manipulation leads to use after free.
This vulnerability is referenced as CVE-2026-50060. Remote exploitation of the attack is possible. No exploit is available.
GHSA
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
ghsa_unreviewed·2026-08-11
CVE-2026-50060 [HIGH] CWE-416 A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-11
Published