Siemens Simcenter Nastran

HIGH

CVSS 7.8

Date 2026-08-18T06:00:00+00:00

Source cisa-csaf

Published by CISA

// Description

Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released new versions for the affected products and recommends to update to the latest versions.

// Vulnerabilities (1)

CVE ID	CVSS Score	Severity	Description
CVE-2026-59086	7.8	high	CVE-2026-59086. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current process.

// Remediations (2)

Patch: Update to V2606 or later version

Update to V2606 or later version