by Kastro
Paper/Archive/CVE-2026-9695

CVE-2026-9695

Dassault Systèmes DELMIA Apriso — Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.0.490 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.

Affected

ProductAffectedFixed inSource
DELMIA AprisoRelease 2020 Golden – Release 2020 SP4–CNA
DELMIA AprisoRelease 2021 Golden – Release 2021 SP3–CNA
DELMIA AprisoRelease 2022 Golden – Release 2022 SP4–CNA
DELMIA AprisoRelease 2023 Golden – Release 2023 SP3–CNA
DELMIA AprisoRelease 2024 Golden – Release 2024 SP2–CNA
DELMIA AprisoRelease 2025 Golden – Release 2025 SP1–CNA
DELMIA AprisoRelease 2026 Golden – Release 2026 SP1–CNA

Scores by source

3DS (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

ref3ds.com/trust-center/security/security-advisories/cve-2026-9695