CVE-2026-11756 — Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release…

CVE-2026-11756

Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x PUBLISHED

Description (CNA)

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / Station Launcher App in 3DEXPERIENCE platform	affected Release 3DEXPERIENCE R2023x Golden through Release 3DEXPERIENCE R2023x.FP.CFA.2613; affected Release 3DEXPERIENCE R2024x Golden through Release 3DEXPERIENCE R2024x.FP.CFA.2615; affected Release 3DEXPERIENCE R2025x Golden through Release 3DEXPERIENCE R2025x.FP.CFA.2628; affected Release 3DEXPERIENCE R2026x Golden through Release 3DEXPERIENCE R2026x.FP.CFA.2624

CWE

CWE-502

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-11756

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.