CVE-2026-50061
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A use-after-free vulnerability in Solid Edge SE2025 and SE2026 when parsing specially crafted DFT files. It could allow an attacker to execute code in the context of the current process.
Risk Assessment
An attacker could exploit the flaw to execute arbitrary code, potentially leading to system compromise or data theft.
Recommendation
Update Solid Edge to version V225.0 Update 15 (for SE2025) or V226.0 Update 7 (for SE2026) or later.
Original NVD description (English source)
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.