CVE-2026-11756

Published: Jul 28, 2026Modified: Jul 30, 2026

10.0

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: 3DS.Information-Security@3ds.com (Secondary)

Description

A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (1)

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-11756

Source: 3DS.Information-Security@3ds.com

Timeline

No history available yet.