by Kastro
Paper/Archive/CVE-2026-17061

CVE-2026-17061

Dassault Systèmes SIMULIA Execution Engine — Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026

EPSS 0.8%CVSS 10.0
critical.is priorityof 100
41
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 57.0.570 × 2011.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.

Affected

ProductAffectedFixed inSource
SIMULIA Execution EngineRelease 2023 Golden–CNA
SIMULIA Execution EngineRelease 2024 Golden – Release 2024 FP.CFA.2615–CNA
SIMULIA Execution EngineRelease 2025 Golden – Release 2025 FP.CFA.2628–CNA
SIMULIA Execution EngineRelease 2026 Golden – Release 2026 FP.CFA.2624–CNA

Scores by source

3DS (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

ref3ds.com/trust-center/security/security-advisories/cve-2026-17061