Paper/Archive/CVE-2026-11756

CVE-2026-11756

Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform — Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x

EPSS 0.8%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 57.0.570 × 2011.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

Affected

ProductAffectedFixed inSource

Station Launcher App in 3DEXPERIENCE platformRelease 3DEXPERIENCE R2023x Golden – Release 3DEXPERIENCE R2023x.FP.CFA.2613–CNA

Station Launcher App in 3DEXPERIENCE platformRelease 3DEXPERIENCE R2024x Golden – Release 3DEXPERIENCE R2024x.FP.CFA.2615–CNA

Station Launcher App in 3DEXPERIENCE platformRelease 3DEXPERIENCE R2025x Golden – Release 3DEXPERIENCE R2025x.FP.CFA.2628–CNA

Station Launcher App in 3DEXPERIENCE platformRelease 3DEXPERIENCE R2026x Golden – Release 3DEXPERIENCE R2026x.FP.CFA.2624–CNA

Scores by source

3DS (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

ref3ds.com/trust-center/security/security-advisories/cve-2026-11756