10.0Kritisch

CVE-2026-11756Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x

Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform Veröffentlicht: (vor 3 Monaten)

Beschreibung

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

Schwachstellentyp (CWE): CWE-502

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2023x Golden – ≤ Release 3DEXPERIENCE R2023x.FP.CFA.2613, Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2615, Release 3DEXPERIENCE R2025x Golden – ≤ Release 3DEXPERIENCE R2025x.FP.CFA.2628, Release 3DEXPERIENCE R2026x Golden – ≤ Release 3DEXPERIENCE R2026x.FP.CFA.2624

Referenzen und Patches