High severity7.8NVD Advisory· Published May 12, 2026· Updated Jun 9, 2026

CVE-2025-12659

Description

Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisagov/Csafreferences
Siemens Foundation/Femapllm-fuzzy

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/html/ssa-870926.htmlnvd
github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-134-05.jsonnvd
www.cisa.gov/news-events/ics-advisories/icsa-26-134-05nvd

News mentions

ZDI-26-316: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability
Zero Day Initiative · May 12, 2026
ZDI-26-317: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability
Zero Day Initiative · May 12, 2026
Siemens Simcenter Femap
CISA ICS Advisories

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000