CVE-2026-50059 is an out-of-bounds write vulnerability (CWE-787) in Siemens Solid Edge SE2025 and SE2026 products. It occurs during the parsing of specially crafted DFT files, potentially enabling remote code execution in the context of the current process. The vulnerability affects all versions of SE2025 before V225.0 Update 15 and SE2026 before V226.0 Update 7. The CVSS 3.1 vector indicates local attack vector with low complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user process, potentially leading to full compromise of the affected application. Confidentiality, integrity, and availability impacts are all rated high. However, the attack requires local access and user interaction, which limits remote exploitation scenarios.

A fix is available in Solid Edge SE2025 starting from version V225.0 Update 15 and in SE2026 starting from version V226.0 Update 7. Users should update to these versions or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying these official updates. No other mitigation guidance is provided in the available data.