Skip to content
OpenAdvisories
Critical · 9.9 CVE-2026-84154 EUVD-2026-88650GHSA-4j5g-4952-v4rh

Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

Published Sep 29, 2026 · Updated Sep 29, 2026 · Assigned by 3DS

Vendor: Dassault Systèmes Product: GEOVIA Geospatial Data Manager

Description

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server.

Affected products

VendorProductAffectedFixed
Dassault Systèmes GEOVIA Geospatial Data Manager Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2632, Release 3DEXPERIENCE R2025x Golden – ≤ Release 3DEXPERIENCE R2025x.FP.CFA.2637, Release 3DEXPERIENCE R2026x Golden – ≤ Release 3DEXPERIENCE R2026x.FP.CFA.2635 —

References