CVE-2026-23715CWE-787

A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)

High · published February 10, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds write vulnerability lurks in Simcenter Femap and Nastran, affecting all versions below V2512! 😬 One crafty XDB file could open the door to code execution right under your nose! Think of it like a delivery service that mistakenly allows a package to be sent to the wrong address — your sensitive data could end up in an unexpected place, and who knows what that delivery person might do with it! 📦 If exploited, an attacker could execute malicious code within the context of the affected application, potentially leading to loss of data or integrity — absolutely devastating scenarios for your workflows! 🥴 Without immediate action, your system could be vulnerable to severe compromises.

Put simply

Think of it like a delivery service that mistakenly allows a package to be sent to the wrong address — your sensitive data could end up in an unexpected place, and who knows what that delivery person might do with it! 📦 This vulnerability occurs when the application improperly handles XDB files, resulting in an out-of-bounds memory write. This flaw can be exploited to run arbitrary code as the current user, raising serious security concerns.

What to do

If exploited, an attacker could execute malicious code within the context of the affected application, potentially leading to loss of data or integrity — absolutely devastating scenarios for your workflows! 🥴 Without immediate action, your system could be vulnerable to severe compromises. To mitigate this risk, update Simcenter Femap and Simcenter Nastran to version V2512 or later immediately. Additionally, conduct a security review of your file handling processes to ensure that only safe, validated files are processed. 🛡️ You've got this! With these updates, you can secure your systems and keep on being the security hero we know you are! ✨

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00179 · 7.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-10T09:58Z
EPSS history
Timeline
  • 10 FEB 09:58Z
    A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)
    cvelistv5