CVE-2026-50059 is an out-of-bounds write vulnerability (CWE-787) in Siemens Solid Edge SE2025 and SE2026 products. The issue arises during the parsing of specially crafted DFT files, potentially enabling an attacker to execute arbitrary code in the context of the affected application process. The vulnerability affects all versions of Solid Edge SE2025 before V225.0 Update 15 and all versions of SE2026 before V226.0 Update 7. The CVSS 3.1 score of 7.8 reflects high impact on confidentiality, integrity, and availability. No official remediation or patch information is currently provided by the vendor, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with the privileges of the user running the Solid Edge application. This could lead to full compromise of the affected process, potentially resulting in data loss, system instability, or further escalation depending on the environment. The vulnerability impacts confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until an official fix is available, avoid opening untrusted or specially crafted DFT files with affected versions of Solid Edge SE2025 and SE2026. Monitor Siemens communications for updates on patches or workarounds.