Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-11756 EUVD-2026-49715GHSA-r8wf-hwm5-pf4x

Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x

Published Jul 28, 2026 · Updated Jul 28, 2026 · Assigned by 3DS

Vendor: Dassault Systèmes Product: Station Launcher App in 3DEXPERIENCE platform

Description

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

Affected products

VendorProductAffectedFixed
Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform Release 3DEXPERIENCE R2023x Golden – ≤ Release 3DEXPERIENCE R2023x.FP.CFA.2613, Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2615, Release 3DEXPERIENCE R2025x Golden – ≤ Release 3DEXPERIENCE R2025x.FP.CFA.2628, Release 3DEXPERIENCE R2026x Golden – ≤ Release 3DEXPERIENCE… —

References