CVE-2026-50062 is an out-of-bounds read vulnerability in Solid Edge SE2025 and SE2026 software. It occurs when the application parses specially crafted PAR files, potentially enabling remote code execution in the context of the current process. The vulnerability affects all versions of Solid Edge SE2025 prior to V225.0 Update 15 and all versions of Solid Edge SE2026 prior to V226.0 Update 7. The CVSS 3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no exploits are known in the wild.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user running the Solid Edge process. This could lead to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability requires local access and user interaction to trigger.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid opening untrusted PAR files and restrict access to the affected Solid Edge versions. Monitor vendor channels for updates.