Siemens Simcenter Nastran Stack Overflow Vulnerability (CVE-2026-59086) Advisory

Vulnerability Overview Vulnerability ID: SSA-069220 Vulnerability Type: Stack Overflow Vulnerability Affected Product: Simcenter Nastran Affected Versions: All versions prior to V2606 Release Date: 2026-08-11 Last Updated: 2026-08-11 CVSS v3.1 Base Score: 7.8 CVSS v4.0 Base Score: 7.3 Impact Scope Affected Product: Simcenter Nastran Affected Versions: All versions prior to V2606 CVE ID: CVE-2026-59086 Remediation Recommendation: Upgrade to version V2606 or later Related Link: https://support.sw.siemens.com/product/28905403 Vulnerability Description CVE ID: CVE-2026-59086 Description: The affected application contains a stack overflow vulnerability when parsing specific strings passed as arguments to the application binary. This may allow an attacker to execute code within the context of the current process. CVSS v3.1 Vector String: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v4.0 Vector String: CVSS:4.0/AV:L/AC:L/HAT:NPR/N/PRI:PVC/HV:HVA/HSC:NSI/NSI:N CWE: CWE-121: Stack-based Buffer Overflow Additional Information Credits: Siemens thanks Michael Henz for coordinated disclosure. General Security Advice: Protect network access, configure environments in accordance with Siemens' Industrial Security Operating Guidelines, and follow the recommendations provided in the product manual. Contact Information: For security vulnerability issues regarding Siemens products and solutions, please contact Siemens ProductCERT. Historical Data Version: V1.0 Release Date: 2026-08-11 Terms of Use Terms of Use: Use of the Siemens Security Advisory is subject to the Siemens Product Usage Terms. --- Code Block No POC code or exploit code is provided.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens Simcenter Nastran Stack Overflow Vulnerability (CVE-2026-59086) Advisory