This vulnerability (CWE-824) in Siemens Solid Edge SE2026 arises from the application accessing an uninitialized pointer while processing specially crafted PAR files. This flaw can lead to arbitrary code execution within the context of the affected process. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. The vulnerability affects all versions prior to V226.0 Update 5. No patch or official fix has been documented in the provided data.

Exploitation could result in arbitrary code execution with the privileges of the current user running Solid Edge SE2026. This can compromise confidentiality, integrity, and availability of the affected system. Since the attack vector is local and requires user interaction, the risk is limited to scenarios where an attacker can induce a user to open a malicious PAR file.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted PAR files and restrict access to the application to trusted users only.