CVE-2020-26999

A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information. (ZDI-CAN-12042)

• CWE-125
• CWE-125

• https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-695540.pdfPatch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-239/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-860/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-695540.pdfPatch, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-239/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-860/Third Party Advisory, VDB Entry

Published

Feb 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26993A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2020-26994A vulnerability has been identified in JT2Go (All versions <…8.8
• CVE-2020-26995A vulnerability has been identified in JT2Go (All versions <…8.8
• CVE-2020-26996A vulnerability has been identified in JT2Go (All versions <…8.8
• CVE-2020-26997A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2020-26998A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2020-2700Vulnerability in the Oracle FLEXCUBE Universal Banking produ…4.3
• CVE-2020-27000A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2020-27001A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2020-27002A vulnerability has been identified in JT2Go (All versions <…7.1
• CVE-2020-27003A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2020-27004A vulnerability has been identified in JT2Go (All versions <…5.5