CVE-2026-50062: Solid Edge PAR File RCE Vulnerability

CVE-2026-50062 Overview

CVE-2026-50062 is an out-of-bounds read vulnerability [CWE-125] in Siemens Solid Edge, a computer-aided design (CAD) application. The flaw exists in the PAR file parser and affects Solid Edge SE2025 versions prior to V225.0 Update 15 and Solid Edge SE2026 versions prior to V226.0 Update 7. An attacker who convinces a user to open a specially crafted PAR file can read memory outside the intended buffer boundaries. Siemens documents the issue in Siemens Security Advisory SSA-621657. Successful exploitation can lead to code execution in the context of the current Solid Edge process.

Critical Impact
A crafted PAR file can trigger an out-of-bounds read that enables arbitrary code execution in the context of the Solid Edge user process.

Affected Products

Siemens Solid Edge SE2025 (all versions before V225.0 Update 15)
Siemens Solid Edge SE2026 (all versions before V226.0 Update 7)
PAR file parsing component within Solid Edge

Discovery Timeline

2026-08-11 - CVE-2026-50062 published to NVD
2026-08-12 - Last updated in NVD database

Technical Details for CVE-2026-50062

Vulnerability Analysis

The vulnerability resides in the PAR file parsing logic used by Solid Edge. PAR is the native part file format used by Solid Edge to store 3D part geometry. When the parser processes a specially crafted PAR file, it reads memory beyond the intended buffer boundary. This out-of-bounds read can expose adjacent process memory or corrupt program state used for subsequent operations. Attackers can leverage the condition to achieve code execution within the context of the current Solid Edge process, inheriting the privileges of the user who opened the file.

Exploitation is local and requires user interaction. A victim must open a malicious PAR file, typically delivered through email, shared drives, or supply-chain distribution of CAD assets. Engineering environments that routinely exchange CAD files with contractors and partners present a realistic attack surface.

Root Cause

The root cause is insufficient bounds validation during deserialization of PAR file structures. The parser reads length or offset fields from attacker-controlled input and uses them without verifying that the resulting access remains within allocated buffers. Vulnerabilities classified under [CWE-125] typically result from missing checks between declared field sizes and actual buffer capacity.

Attack Vector

An attacker crafts a malicious PAR file with manipulated internal structures that trigger reads past a buffer boundary. The attacker delivers the file to a Solid Edge user through phishing, a shared engineering repository, or a compromised third-party asset. When the user opens the file, the parser processes the malformed content and dereferences invalid memory. Chained with predictable memory layout conditions, the read primitive can be leveraged toward arbitrary code execution in the Solid Edge process context. See Siemens Security Advisory SSA-621657 for vendor technical details.

Detection Methods for CVE-2026-50062

Indicators of Compromise

Unexpected crashes or hangs of Edge.exe or related Solid Edge processes shortly after opening a PAR file
Windows Error Reporting (WER) entries citing access violations in Solid Edge modules that parse PAR data
PAR files arriving from untrusted sources, external email attachments, or unmanaged file shares
Child processes spawned by Solid Edge that are inconsistent with normal CAD workflows, such as shells or scripting interpreters

Detection Strategies

Monitor process telemetry for Solid Edge spawning unexpected child processes such as cmd.exe, powershell.exe, or rundll32.exe
Alert on Solid Edge process crashes correlated with file-open events for .par files
Inspect endpoint logs for PAR files written to temporary directories immediately before Solid Edge invocation

Monitoring Recommendations

Enable command-line and process-creation auditing on engineering workstations running Solid Edge
Forward endpoint telemetry to a centralized data lake to correlate CAD file activity with subsequent process behavior
Track software inventory to identify hosts still running Solid Edge SE2025 below V225.0 Update 15 or SE2026 below V226.0 Update 7

How to Mitigate CVE-2026-50062

Immediate Actions Required

Update Solid Edge SE2025 to V225.0 Update 15 or later
Update Solid Edge SE2026 to V226.0 Update 7 or later
Instruct users to open PAR files only from trusted, verified sources
Restrict execution of Solid Edge to standard user accounts, not administrative accounts, to limit the impact of successful exploitation

Patch Information

Siemens has released fixed versions addressing CVE-2026-50062. Apply Solid Edge SE2025 V225.0 Update 15 or Solid Edge SE2026 V226.0 Update 7. Refer to Siemens Security Advisory SSA-621657 for full remediation guidance and download instructions.

Workarounds

Block inbound PAR files at email gateways when not required for business operations
Isolate CAD workstations from general-purpose network segments to reduce lateral movement risk after exploitation
Enforce application allowlisting to prevent unexpected child processes from launching under Solid Edge

bash

# Query installed Solid Edge version on Windows endpoints
reg query "HKLM\SOFTWARE\Siemens\Solid Edge\Version" /s