CVE WatchOct 23, 2026

CVE-2026-44411

A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is vulnerable to uniniti

CVSS

7.8

High

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: May 12, 2026 · Last modified: Oct 23, 2026 · CWE-824

EPSS · 30d

0.1%EPSS · 30 days0.2%

2026-10-042026-10-31

Technical description

A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Official references

cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-921111.html

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1153275.3 MED

24.4%

——7libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lyd_parse_op() to crash servers like netopeer2 or corrupt the heap.4d CVE-2026-1096198.1 HIG

100.0%

KEV—80PHP Stale Internal Request-State Vulnerability2d CVE-2026-1096189.8 CRI

100.0%

KEV—80PHP Memory Corruption Vulnerability2d CVE-2026-94018—

33.8%

——10The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT` request. The condition is reachable by an unauthenticated remote client with a single malformed request.12d CVE-2026-868476.5 MED

8.2%

——2A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash.13d CVE-2026-1106036.3 MED

6.5%

——2LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C API, crashes the process and corrupts the heap.16d