CVE-2020-26980

A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing JT files. A crafted JT file could trigger a type confusion condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11881)

• CWE-843
• CWE-843

• https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdfVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-046/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-622830.pdfVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-046/Third Party Advisory, VDB Entry

Published

Jan 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26975When a malicious application installed on the user's device …6.5
• CVE-2020-26976When a HTTPS pages was embedded in a HTTP page, and there wa…6.5
• CVE-2020-26977By attempting to connect a website using an unresponsive por…6.5
• CVE-2020-26978Using techniques that built on the slipstream research, a ma…6.1
• CVE-2020-26979When a user typed a URL in the address bar or the search bar…6.1
• CVE-2020-2698Vulnerability in the Oracle VM VirtualBox product of Oracle …7.5
• CVE-2020-26981A vulnerability has been identified in JT2Go (All versions <…6.5
• CVE-2020-26982A vulnerability has been identified in JT2Go (All versions <…8.8
• CVE-2020-26983A vulnerability has been identified in JT2Go (All versions <…8.8
• CVE-2020-26984A vulnerability has been identified in JT2Go (All versions <…8.8
• CVE-2020-26985A vulnerability has been identified in JT2Go (All versions <…8.8
• CVE-2020-26986A vulnerability has been identified in JT2Go (All versions <…8.8