CVE-2026-42958 is a use-after-free vulnerability (CWE-416) in Labcenter Proteus 9.1_SP4_Build-42914. The vulnerability arises during the parsing of specially crafted files, leading to memory corruption that may enable arbitrary code execution in the context of the current process. The CVSS 4.0 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, but results in high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation can result in arbitrary code execution within the Proteus process, potentially compromising system confidentiality, integrity, and availability. The attack requires local access and user interaction, limiting remote exploitation but still posing a significant risk on affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and consider restricting local access to the affected software.