Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-12 | 1 | Patch1 |
| 2026-02-13 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos Siemens ❗ CVE-2026-25656 ❗ CVE-2026-25655 ❗ CVE-2025-40936 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-siemens-3/ https://t.co/Y8ZxJcLVfr
Post summary
The post lists three Siemens product CVEs and provides a link for further information, but offers no additional technical or exploit details.
🚨 CISA: Siemens Solid Edge CAD flaw could enable code execution via crafted files CISA’s ICSA-26-043-05 (Feb 12, 2026) warns Siemens Solid Edge is affected by CVE-2025-40936 (out-of-bounds read), where opening a specially crafted file can crash the app or potentially lead to code execution in the user’s context—so CAD/engineering environments should upgrade to the fixed Solid Edge release. 🎯 Target: Global/Engineering & Manufacturing (CAD) #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-05
Post summary
The advisory highlights an out‑of‑bounds read flaw in Siemens Solid Edge (CVE‑2025‑40936) that could enable code execution, and it urges users to apply the fixed release.