CVE-2025-40745Low· 3.7▾ SunlitA vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE202…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.1%
Last analysed / modified upstream
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Update 04), Tecnomatix Plant Simulation (All versions < V2504.0008). Affected applications do not properly validate client certificates to connect to Analytics Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
simcenter_3d < 2506.6000simcenter_femap < 2506.6000simcenter_star-ccm+_viewer < 2602software_center < 3.5.8.2solid_edge_se2025 < 225.0solid_edge_se2025 = 225.0solid_edge_se2026 < 226.0solid_edge_se2026 = 226.0tecnomatix_plant_simulation < 2504.0008Upgrade past the affected range:
simcenter_3d 2506.6000simcenter_femap 2506.6000simcenter_star-ccm+_viewer 2602software_center 3.5.8.2solid_edge_se2025 225.0solid_edge_se2026 226.0tecnomatix_plant_simulation 2504.0008Connected by shared product, vendor, weakness, or advisory.
CVE-2026-78556High· 7.4A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9)
CVE-2025-14022High· 7.7LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK
CVE-2021-20327Medium· 6.4A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate
CVE-2018-0227High· 7.5A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to establish an SSL VPN…
CVE-2026-89209Medium· 6.8A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 9 compatible) (All versions < V3.6.29)
CVE-2026-110936Medium· 6.7A vulnerability has been identified in Siemens Software Center (All versions)