CVE-2026-23718CWE-125

A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)

High · published February 10, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

⚡ An out of bounds read vulnerability lurks in Simcenter Femap and Nastran (all versions < V2512), just waiting to be exploited! Think of this vulnerability like a delivery driver who misreads an address and ends up opening a package meant for someone else — they could end up revealing sensitive information or worse. It’s a crucial code oversight that lets attackers peek into areas they shouldn’t be able to access! If exploited, an attacker could execute malicious code in the context of the current process, potentially leading to unauthorized actions or data breaches. This means that critical processes could be compromised, with attackers gaining a level of control that could be absolutely devastating to your operations!

Put simply

Think of this vulnerability like a delivery driver who misreads an address and ends up opening a package meant for someone else — they could end up revealing sensitive information or worse. It’s a crucial code oversight that lets attackers peek into areas they shouldn’t be able to access! This vulnerability occurs while the affected applications parse specially crafted NDB files, allowing an attacker to perform an out of bounds read, thus gaining access to unintended memory locations.

What to do

If exploited, an attacker could execute malicious code in the context of the current process, potentially leading to unauthorized actions or data breaches. This means that critical processes could be compromised, with attackers gaining a level of control that could be absolutely devastating to your operations! To protect yourself, upgrade to Simcenter Femap and Nastran version 2512 or higher immediately. Additionally, review any NDB files for integrity and ensure proper input validation practices are in place. You've got this! With these steps, you'll be locking down your systems and keeping your data safe in no time! 🛡️

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-02-10T09:58Z
EPSS history
Timeline
  • 10 FEB 09:58Z
    A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)
    cvelistv5