Vulnerabilities

CVSS

7.8 High

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Risk score

62.4

Published

2026-05-12

Status

Published

Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process.

Weaknesses

CWE-122

Coverage 1

vulnerability

Siemens Simcenter Femap

A heap-based buffer overflow vulnerability has been identified in Siemens Simcenter Femap, specifically within the Datakit library. The vulnerability, reported by TrendAI Zero Day Initiative, allows for remote code execu…

CISA Advisories · May 14, 2026 High

CVE-2025-12659GEheap-overflowremote-code-executionipt

All articles mentioning it

Advisories and references

• cert-portal.siemens.com/productcert/html/ssa-870926.html
• cisa.gov/news-events/ics-advisories/icsa-26-134-05
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...