10.0Crítica
CVE-2026-11756Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x
Descripción
A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.
Debilidad (CWE):
CWE-502
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Dassault Systèmes | Station Launcher App in 3DEXPERIENCE platform | Release 3DEXPERIENCE R2023x Golden – ≤ Release 3DEXPERIENCE R2023x.FP.CFA.2613, Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2615, Release 3DEXPERIENCE R2025x Golden – ≤ Release 3DEXPERIENCE R2025x.FP.CFA.2628, Release 3DEXPERIENCE R2026x Golden – ≤ Release 3DEXPERIENCE R2026x.FP.CFA.2624 |