CVE-2026-50062 is an out-of-bounds read vulnerability (CWE-125) in Siemens Solid Edge SE2025 and SE2026. It occurs during parsing of specially crafted PAR files, potentially enabling an attacker to execute arbitrary code in the context of the affected process. The affected versions are all SE2025 versions before V225.0 Update 15 and all SE2026 versions before V226.0 Update 7. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user process, impacting confidentiality, integrity, and availability of the affected system. The vulnerability arises from an out-of-bounds read during file parsing, which may be leveraged by an attacker to execute malicious code.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted PAR files with affected versions of Solid Edge SE2025 and SE2026.