CVE-2026-59700 is an out-of-bounds read vulnerability (CWE-125) in Siemens Simcenter Femap affecting all versions before V2606.0001. The vulnerability occurs during the parsing of specially crafted BMP files, potentially enabling code execution in the context of the current process. The CVSS 3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the user running Simcenter Femap, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, avoid opening untrusted BMP files with Simcenter Femap and apply standard security best practices to limit exposure.