CVE-2026-50064 is an out-of-bounds write vulnerability (CWE-787) in Siemens Solid Edge SE2025 and SE2026. It occurs during the parsing of maliciously crafted PSM files, potentially enabling an attacker to execute arbitrary code in the context of the affected application process. The affected versions include all releases before V225.0 Update 15 for SE2025 and before V226.0 Update 7 for SE2026. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). As of the published date, no vendor advisory or patch information is available to confirm remediation status.

Exploitation of this vulnerability could lead to arbitrary code execution with high impact on confidentiality, integrity, and availability of the affected system. The attacker would need local access (AV:L) and user interaction (UI:R) to trigger the vulnerability. Successful exploitation compromises the application process, potentially allowing full control over the affected software environment.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until an official fix is available, avoid opening untrusted or suspicious PSM files in affected versions of Solid Edge SE2025 and SE2026. Monitor Siemens communications for updates on patches or workarounds.