CVE-2026-23716CWE-125

A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)

High · published February 10, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds read vulnerability lurks in Simcenter Femap and Nastran! Attackers could potentially execute code in the current process without a single warning. 🔥 Think of this as a delivery driver who accidentally opens a package meant for someone else, exposing sensitive contents. With specially crafted XDB files, an attacker can peek into areas they shouldn't, just like that nosy driver. 📦 This vulnerability could lead to a complete compromise of the application, allowing attackers to run arbitrary code and potentially gain access to sensitive data. Imagine the chaos if an attacker took full control of your engineering software—data could be manipulated or leaked at will!

Put simply

Think of this as a delivery driver who accidentally opens a package meant for someone else, exposing sensitive contents. With specially crafted XDB files, an attacker can peek into areas they shouldn't, just like that nosy driver. 📦 This out-of-bounds read vulnerability in Simcenter Femap and Nastran occurs when the software improperly parses specially crafted XDB files, leading to unauthorized code execution in the context of the process.

What to do

This vulnerability could lead to a complete compromise of the application, allowing attackers to run arbitrary code and potentially gain access to sensitive data. Imagine the chaos if an attacker took full control of your engineering software—data could be manipulated or leaked at will! To mitigate this risk, upgrade both Simcenter Femap and Nastran to version V2512 or later immediately. It's crucial to review and validate the security of any input files processed by these applications to ensure they're not tampered with. 🛡️ You've got this! By following these steps, you can protect your systems and keep the engineering world safe! 😊💪

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-02-10T09:58Z
EPSS history
Timeline
  • 10 FEB 09:58Z
    A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)
    cvelistv5