CVE-2026-50064 Overview
CVE-2026-50064 is an out-of-bounds write vulnerability [CWE-787] affecting Siemens Solid Edge SE2025 and SE2026. The flaw occurs when the application parses specially crafted PSM (Solid Edge Part) files. An attacker who convinces a user to open a malicious PSM file can execute arbitrary code in the context of the current process.
The vulnerability affects Solid Edge SE2025 versions prior to V225.0 Update 15 and Solid Edge SE2026 versions prior to V226.0 Update 7. Exploitation requires local access and user interaction, but successful exploitation grants full compromise of the application context.
Critical Impact
Attackers can achieve arbitrary code execution on engineering workstations by delivering crafted PSM files to Solid Edge users.
Affected Products
- Siemens Solid Edge SE2025 (all versions prior to V225.0 Update 15)
- Siemens Solid Edge SE2026 (all versions prior to V226.0 Update 7)
- Computer-aided design (CAD) workstations processing untrusted PSM files
Discovery Timeline
- 2026-08-11 - CVE-2026-50064 published to NVD
- 2026-08-11 - Siemens ProductCERT published advisory SSA-621657
- 2026-08-11 - Last updated in NVD database
Technical Details for CVE-2026-50064
Vulnerability Analysis
CVE-2026-50064 is an out-of-bounds write condition in the PSM file parser used by Siemens Solid Edge. PSM files store Solid Edge sheet metal part geometry, and the parser processes structured binary data that describes model elements. When the parser encounters malformed length or offset fields, it writes data past the bounds of an allocated buffer.
Out-of-bounds writes corrupt adjacent memory structures. Attackers use this primitive to overwrite function pointers, virtual tables, or return addresses on the stack. The end result is control of the instruction pointer and execution of attacker-supplied code within the Solid Edge process.
Exploitation requires the victim to open the malicious PSM file. Engineering environments frequently exchange CAD files through email, shared drives, and supplier portals, which increases the likelihood of a user interacting with an untrusted file.
Root Cause
The root cause is missing or insufficient bounds validation during deserialization of PSM file structures. The parser trusts size or offset fields embedded in the file and writes into fixed-size buffers without verifying that the destination range remains within allocated memory. This pattern maps to [CWE-787: Out-of-bounds Write].
Attack Vector
The attack vector is local and requires user interaction. An attacker crafts a malicious PSM file and delivers it through phishing, a compromised supply chain, or a shared file repository. When the target opens the file in a vulnerable version of Solid Edge, the parser processes the malicious structures and triggers the out-of-bounds write. Code then executes with the privileges of the logged-in user running Solid Edge.
Refer to the Siemens Security Advisory SSA-621657 for technical details published by the vendor.
Detection Methods for CVE-2026-50064
Indicators of Compromise
- Unexpected crashes of Solid Edge processes when opening PSM files from external sources
- PSM files delivered through email, chat, or removable media from untrusted senders
- Solid Edge processes spawning unexpected child processes such as cmd.exe, powershell.exe, or rundll32.exe
- Outbound network connections initiated by Solid Edge process trees shortly after file open events
Detection Strategies
- Monitor for anomalous process lineage where Solid Edge (Edge.exe and related binaries) spawns command interpreters or script hosts
- Alert on Solid Edge processes writing executable files, DLLs, or scheduled tasks to disk
- Correlate PSM file open events with subsequent memory access violations recorded in Windows Application logs
Monitoring Recommendations
- Inventory all endpoints running Solid Edge SE2025 and SE2026 and track patch state against the fixed versions
- Capture endpoint telemetry for CAD application process trees, module loads, and file writes
- Log inbound PSM file transfers from email gateways and file-sharing services for retrospective hunting
How to Mitigate CVE-2026-50064
Immediate Actions Required
- Upgrade Solid Edge SE2025 to V225.0 Update 15 or later
- Upgrade Solid Edge SE2026 to V226.0 Update 7 or later
- Instruct engineering users to open PSM files only from trusted internal sources
- Block untrusted PSM file attachments at email and web gateways until patching completes
Patch Information
Siemens has released fixed versions for both affected product lines. Apply V225.0 Update 15 for Solid Edge SE2025 and V226.0 Update 7 for Solid Edge SE2026. Detailed patch guidance and download references are available in the Siemens Security Advisory SSA-621657.
Workarounds
- Restrict Solid Edge to opening PSM files sourced from verified project directories
- Apply application allowlisting to prevent Solid Edge from spawning shell or scripting binaries
- Run Solid Edge under a standard user account to limit the impact of arbitrary code execution
- Segment CAD workstations from sensitive network zones to constrain lateral movement following compromise
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
