# CVE-2026-50064: Siemens Solid Edge out-of-bounds write in PSM file parsing

Source: https://junglewise.ai/threats/cve-2026-50064-siemens-solid-edge-out-of-bounds-write-in-psm-file-parsing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-50064 · Severity: high · CVSS 7.8 · Published 2026-08-11

Solid Edge is a 3D design and product development software suite used by engineers across manufacturing and industrial sectors. An out-of-bounds write vulnerability in PSM file parsing allows attackers to execute arbitrary code when a user opens a specially crafted PSM file, potentially compromising design data, triggering denial of service, or serving as an entry point for broader system compromise.

Technologies: [Siemens Solid Edge SE2026](https://junglewise.ai/threats/technologies/solid-edge). Vendors: [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2026-50064 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-50064 being exploited in the wild.

**How severe is CVE-2026-50064?** High severity, with a CVSS score of 7.8, published 11 August 2026.

**Which products and versions are affected?** Siemens Solid Edge SE2026 All versions < V226.0 Update 7; Siemens Solid Edge Se2025 All versions < V225.0 Update 15.

**Is there a fix for CVE-2026-50064?** A patch was published on 2026-08-11: Patches released: SE2025 Update 15, SE2026 Update 7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-50064 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-50064?** Check whether you run Siemens Solid Edge SE2026 or Siemens Solid Edge Se2025 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an out-of-bounds write (CWE-787) that occurs during parsing of specially crafted PSM (part and sheet metal) files in Solid Edge SE2025 (versions before V225.0 Update 15) and SE2026 (versions before V226.0 Update 7). The attack requires local file access and user interaction to open a malicious PSM file; no network or authentication is required. Successful exploitation allows arbitrary code execution in the context of the Solid Edge process with the privileges of the user running the application. Siemens has released patches: SE2025 Update 15 and SE2026 Update 7.

## Affected products

- Siemens Solid Edge SE2025 All versions < V225.0 Update 15
- Siemens Solid Edge SE2026 All versions < V226.0 Update 7

## Timeline

- 2026-08-11: disclosed: Siemens ProductCERT advisory SSA-621657 published
- 2026-08-11: patched: Patches released: SE2025 Update 15, SE2026 Update 7

## References

- [https://cert-portal.siemens.com/productcert/html/ssa-621657.html](https://cert-portal.siemens.com/productcert/html/ssa-621657.html)

## Related threats

- [Siemens Solid Edge out-of-bounds read in PAR file parsing](https://junglewise.ai/threats/cve-2026-50063-siemens-solid-edge-out-of-bounds-read-in-par-file-parsing)
- [Siemens Solid Edge out-of-bounds read in PAR file parsing](https://junglewise.ai/threats/cve-2026-50062-siemens-solid-edge-out-of-bounds-read-in-par-file-parsing)
- [Siemens Solid Edge use-after-free in DFT file parsing](https://junglewise.ai/threats/cve-2026-50061-siemens-solid-edge-use-after-free-in-dft-file-parsing)
- [Siemens Solid Edge use-after-free in DFT file parsing](https://junglewise.ai/threats/cve-2026-50060-siemens-solid-edge-use-after-free-in-dft-file-parsing)
- [Siemens Solid Edge out-of-bounds write in DFT file parsing](https://junglewise.ai/threats/cve-2026-50059-siemens-solid-edge-out-of-bounds-write-in-dft-file-parsing)