CVE-2026-23717CWE-125

A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)

High · published February 10, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds read vulnerability hides in Simcenter Femap and Nastran before version 2512, just waiting to be exploited! 🔥 Think of it like a chef who accidentally includes a pinch of salt from the wrong jar — a small mistake that can ruin an entire dish. In this case, the vulnerability lets attackers sneak in and execute code within the running process, just like a rogue ingredient can mess with your meticulously crafted recipe. This means that an attacker could potentially gain control over the processes involved, leading to unauthorized actions or data manipulation. If left unaddressed, the consequences could be devastating, allowing attackers to undermine the integrity of your simulations and analyses.

Put simply

Think of it like a chef who accidentally includes a pinch of salt from the wrong jar — a small mistake that can ruin an entire dish. In this case, the vulnerability lets attackers sneak in and execute code within the running process, just like a rogue ingredient can mess with your meticulously crafted recipe. The out of bounds read vulnerability in Simcenter Femap and Nastran occurs when parsing specially crafted XDB files, enabling attackers to execute arbitrary code in the context of the current process.

What to do

This means that an attacker could potentially gain control over the processes involved, leading to unauthorized actions or data manipulation. If left unaddressed, the consequences could be devastating, allowing attackers to undermine the integrity of your simulations and analyses. To protect against this vulnerability, update to version 2512 or later of both Simcenter Femap and Simcenter Nastran. It’s crucial to audit any XDB files being processed to identify potential risks. Don't wait, patch those systems! You've got this! Follow these steps, and you'll keep your simulations safe and secure. 🛡️

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-02-10T09:58Z
EPSS history
Timeline
  • 10 FEB 09:58Z
    A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)
    cvelistv5