This vulnerability (CWE-824) in Siemens Solid Edge SE2026 arises from the application accessing an uninitialized pointer while processing specially crafted PAR files. This memory handling flaw can be exploited to achieve arbitrary code execution within the context of the current process. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability, with attack vector local and requiring user interaction but no privileges. The affected versions include all releases before V226.0 Update 5. No patch or official remediation guidance has been published by Siemens as of the data provided.

An attacker who can supply a malicious PAR file to the vulnerable Solid Edge SE2026 application could execute arbitrary code with the same privileges as the user running the software. This could lead to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability requires local access and user interaction to trigger.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted PAR files with Solid Edge SE2026. Monitor Siemens communications for updates on patches or mitigations.